CVE-2026-2272

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the `ico_read_info` and `ico_read_icon` functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized image headers to bypass security checks. A remote attacker could exploit this by providing a specially crafted ICO file, leading to a buffer overflow and memory corruption, which may result in an application level denial of service.

• CWE-190

• https://access.redhat.com/security/cve/CVE-2026-2272Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2438428Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.gnome.org/GNOME/gimp/-/issues/15617Exploit, Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=2438428Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.gnome.org/GNOME/gimp/-/issues/15617Exploit, Issue Tracking

Published

Mar 26, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22714Improper Neutralization of Input During Web Page Generation …2.3
• CVE-2026-22715VMWare Workstation and Fusion contain a logic flaw in the ma…5.9
• CVE-2026-22716Out-of-bound write vulnerability in VMware Workstation 25H1 …5
• CVE-2026-22717Out-of-bound read vulnerability in VMware Workstation 25H1 a…2.7
• CVE-2026-22718The VSCode extension for Spring CLI are vulnerable to comman…6.8
• CVE-2026-22719VMware Aria Operations contains a command injection vulnerab…8.1
• CVE-2026-22720VMware Aria Operations contains a stored cross-site scriptin…9
• CVE-2026-22721VMware Aria Operations contains a privilege escalation vulne…7.2
• CVE-2026-22722A malicious actor with authenticated user privileges on a Wi…6.1
• CVE-2026-22723Inappropriate user token revocation due to a logic error in …6.5
• CVE-2026-22726Route Services can be leveraged to send app traffic to netwo…5
• CVE-2026-22727Unprotected internal endpoints in Cloud Foundry Capi Release…7.5