VULNERABILITY INTELLIGENCE

CVE-2026-40917

CVSS score5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-04-15
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Description

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.

Weakness classification

  • secalert@redhat.com: CWE-125

Primary references