---
id: "CVE-2026-92183"
kind: "vulnerability"
aliases: ["CVE-2026-92183"]
title: "GIMP: APNG file parsing overflow lets a malicious file run code"
severity: "high"
cvss: 7.8
epss: 0.00363
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["desktop", "gimp", "linux", "macos", "package", "windows"]
not_affected_if: ["gimp-not-installed", "trusted-files-only"]
published_at: "2026-10-21T18:17:30+00:00"
first_seen_at: "2026-10-23T21:57:29+00:00"
updated_at: "2026-10-25T03:08:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92183", "first_seen_at": "2026-10-23T21:57:29+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-92183", "first_seen_at": "2026-10-24T13:15:54+00:00"}]
---

# GIMP: APNG file parsing overflow lets a malicious file run code

GIMP mishandles the length of data read from an APNG image, copying it into a fixed stack buffer without a bounds check. An attacker who gets a user to open or view a crafted file can run code in the GIMP process.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `gimp --version` on each workstation or server that has GIMP installed and compare against the fixed release.
- unknown

## Fix

- Upgrade GIMP to the fixed release listed by the vendor (version unknown from the sources).
- Until patched, avoid opening APNG files from untrusted sources.

## Timeline

- 2026-10-23T21:57:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-92183
- 2026-10-24T13:15:54+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-92183

## From the sources

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of APNG files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29400.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_