cbcvebase.
CVE-2026-40917
published 2026-04-15

CVE-2026-40917: A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image…

high7.1CVSS 3.1
AVLACLPRNUIRSUCHINAH
A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.

Affected

4 ranges
VendorProductVersion rangeFixed in
redhatenterprise_linux——
redhatenterprise_linux——
redhatenterprise_linux——
redhatenterprise_linux——