GIMP file-icns plugin Heap Info Leak via Buffer Overread (CVE-2026-66759)

Vulnerability Overview Vulnerability ID: CVE-2026-66759 Description: A vulnerability was discovered in GIMP's plugin, affecting version 2.98.14 and later. When processing ICNS images, if the cursor exceeds the allocated buffer size, the plugin reads truncated tag resources, leading to information leakage or crashes. Severity: Medium Status: Newly Reported Scope of Impact Affected Software: GIMP Affected Versions: 2.98.14 and later Operating System: Linux Hardware: All hardware Remediation Fix Status: Unfixed Fix Version: Not specified Environment: Not specified Last Closed Time: Not specified Embargo: Not specified Additional Information Reported Time: 2026-07-27 16:02 UTC by OSIDB Ezport Modified Time: 2026-07-27 19:09 UTC (history) CC List: 2 users (details) Component: Vulnerability Version: Not specified Priority: Medium Severity: Medium Target Milestone: None Assigned To: Product Security DevOps Team QA Contact: None Doc Contact: None URL: None Whitelist: None Dependencies: 2507630 Tree View: Depends on / Blocks Attachments Attachment: None Description Detailed Description: A vulnerability was discovered in GIMP's plugin, affecting version 2.98.14 and later. When processing ICNS images, if the cursor exceeds the allocated buffer size, the plugin reads truncated tag resources, leading to information leakage or crashes. Specifically, the function causes heap information leakage when reading memory beyond buffer boundaries, where memory contents are leaked as alpha channel pixel values, or causes a denial of service if unmapped memory is accessed. Remarks Remarks: You must log in to comment on or make changes to this vulnerability. Other Information Privacy: Link Contact: Link FAQ: Link Legal: Link Summary This vulnerability involves GIMP's plugin, which poses a risk of information leakage or crash when processing ICNS images. The affected versions are 2.98.14 and later, and the issue remains unfixed.

Goal Reached Thanks to every supporter — we hit 100%!

GIMP file-icns plugin Heap Info Leak via Buffer Overread (CVE-2026-66759)