Yüksek CVSS 7.8
CVE-2026-42169: Enterprise Linux: güvenlik açığı
Açıklama (NVD)
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.
Özet bilgiler
- Ürün
- Redhat Enterprise Linux
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %0,13 (yüzdelik 3)
- CWE
- CWE-131
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux-eus | 9.6 | 9.6 | — |