CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

• CWE-131

• https://access.redhat.com/errata/RHSA-2026:50817Issue Tracking
• https://access.redhat.com/errata/RHSA-2026:73768Issue Tracking
• https://access.redhat.com/errata/RHSA-2026:80509
• https://access.redhat.com/errata/RHSA-2026:93589
• https://access.redhat.com/security/cve/CVE-2026-42169Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2461725Issue Tracking, Vendor Advisory

Published

Aug 4, 2026

Last Modified

Nov 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42160Data Space Portal is an open-source Software as a Service (S…10
• CVE-2026-42162Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts…9.1
• CVE-2026-42163Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthori…9.8
• CVE-2026-42164Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text …9.8
• CVE-2026-42167mod_sql in ProFTPD before 1.3.9a allows remote attackers to …8.1
• CVE-2026-42168django-pyas2 through 1.2.3 is vulnerable to OS command injec…9.1
• CVE-2026-4217A security vulnerability has been detected in XREAL Nebula A…2.5
• CVE-2026-42170A heap-based buffer overflow vulnerability exists in the GIM…7.8
• CVE-2026-42171NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12…7.8
• CVE-2026-42172Coolify is an open-source and self-hostable tool for managin…3.1
• CVE-2026-42174Kirby is an open-source content management system. Prior to …4.3
• CVE-2026-42175requests-hardened is a library that overrides the default be…6.5