CVE-2026-2047 — Heap-based Buffer Overflow in Gimp

Vendor	Product	Version range	Fixed in
debian	gimp	< gimp 3.2.0~RC3-1 (forky)	gimp 3.2.0~RC3-1 (forky)
gimp	gimp	—	—
gimp	gimp	>= 0 < 3.0.4-3+deb13u7	3.0.4-3+deb13u7
gimp	gimp	>= 0 < 3.2.0~RC3-1	3.2.0~RC3-1
wwbn	avideo	0 – 26.0	—

Red Hat

gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing

vendor_redhat·2026-02-20·CVSS 7.8

CVE-2026-2047 [HIGH] CWE-131 gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28530. A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the

Debian

CVE-2026-2047: gimp - GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerab...

vendor_debian·2026·CVSS 7.8

CVE-2026-2047 [HIGH] CVE-2026-2047: gimp - GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerab... GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28530. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 3.2.0~RC3-1) sid: resolved (fixed in 3.2.0~RC3-1) trixie: resolved (fixed in 3.0.4-3+deb13

GHSA

AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints

ghsa·2026-03-26

CVE-2026-33766 [MEDIUM] CWE-918 AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints ## Summary `isSSRFSafeURL()` validates URLs against private/reserved IP ranges before fetching, but `url_get_contents()` follows HTTP redirects without re-validating the redirect target. An attacker can bypass SSRF protection by redirecting from a public URL to an internal target. ## Root Cause **Check-time:** `isSSRFSafeURL()` at `objects/functions.php:4066` resolves the hostname and validates the IP. **Use-time:** `url_get_contents()` at `objects/functions.php:1990` calls `file_get_contents()` with PHP's default `follow_location=1` — redirects are followed without re-validation. The wget fallback at line 2047 also follows redirects by default. **Affected endpoint:** `objects/aVideoEncoderReceiveImage.js

GHSA

GHSA-xhcq-9mcp-rrvr: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ghsa_unreviewed·2026-02-21

CVE-2026-2047 [HIGH] CWE-122 GHSA-xhcq-9mcp-rrvr: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28530.

OSV

CVE-2026-2047: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

osv·2026-02-20·CVSS 7.8

CVE-2026-2047 [HIGH] CVE-2026-2047: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28530.

CVE-2026-2047: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…

Affected

CVSS provenance