High

UBUNTU-CVE-2026-42169

Type: advisorySource: OSV1 source record

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

Announced 4 Aug 2026Source revision 1

Original source ↗

UBUNTU-CVE-2026-42169

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:UBUNTU-CVE-2026-42169

gimp

Source reference: /affected/0/package/name

Affected versions: 2.8.14-1ubuntu2
Source reference: /affected/0/versions
2.8.14-1.2ubuntu1
Source reference: /affected/0/versions
2.8.16-1ubuntu1
Source reference: /affected/0/versions
2.8.16-1ubuntu1.1
Source reference: /affected/0/versions
2.8.16-1ubuntu1.1+esm1
Source reference: /affected/0/versions
2.8.16-1ubuntu1.1+esm2
Source reference: /affected/0/versions
2.8.16-1ubuntu1.1+esm3
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

gimp

Source reference: /affected/1/package/name

Affected versions: 2.8.20-1
Source reference: /affected/1/versions
2.8.20-1.1
Source reference: /affected/1/versions
2.8.20-2
Source reference: /affected/1/versions
2.8.22-1
Source reference: /affected/1/versions
2.8.22-1ubuntu0.1~esm1
Source reference: /affected/1/versions
2.8.22-1ubuntu0.1~esm2
Source reference: /affected/1/versions
2.8.22-1ubuntu0.1~esm3
Source reference: /affected/1/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

gimp

Source reference: /affected/2/package/name

Affected versions: 2.10.8-2
Source reference: /affected/2/versions
2.10.14-2
Source reference: /affected/2/versions
2.10.14-2build1
Source reference: /affected/2/versions
2.10.14-2ubuntu1
Source reference: /affected/2/versions
2.10.14-3
Source reference: /affected/2/versions
2.10.18-1
Source reference: /affected/2/versions
2.10.18-1ubuntu0.1
Source reference: /affected/2/versions
2.10.18-1ubuntu0.1+esm1
Source reference: /affected/2/versions
2.10.18-1ubuntu0.1+esm2
Source reference: /affected/2/versions
2.10.18-1ubuntu0.1+esm3
Source reference: /affected/2/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

gimp

Source reference: /affected/3/package/name

Affected versions: 2.10.24-2
Source reference: /affected/3/versions
2.10.28-1
Source reference: /affected/3/versions
2.10.30-1
Source reference: /affected/3/versions
2.10.30-1build1
Source reference: /affected/3/versions
2.10.30-1ubuntu0.1
Source reference: /affected/3/versions
2.10.30-1ubuntu0.1+esm1
Source reference: /affected/3/versions
2.10.30-1ubuntu0.1+esm2
Source reference: /affected/3/versions
2.10.30-1ubuntu0.1+esm3
Source reference: /affected/3/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

gimp

Source reference: /affected/4/package/name

Affected versions: 2.10.34-1
Source reference: /affected/4/versions
2.10.36-1
Source reference: /affected/4/versions
2.10.36-2
Source reference: /affected/4/versions
2.10.36-3build2
Source reference: /affected/4/versions
2.10.36-3build3
Source reference: /affected/4/versions
2.10.36-3ubuntu0.24.04.1
Source reference: /affected/4/versions
2.10.36-3ubuntu0.24.04.1+esm1
Source reference: /affected/4/versions
2.10.36-3ubuntu0.24.04.1+esm2
Source reference: /affected/4/versions
2.10.36-3ubuntu0.24.04.1+esm3
Source reference: /affected/4/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

gimp

Source reference: /affected/5/package/name

Affected versions: 3.0.4-6.1
Source reference: /affected/5/versions
3.0.4-6.2
Source reference: /affected/5/versions
3.0.6-1
Source reference: /affected/5/versions
3.2.0~RC2-2
Source reference: /affected/5/versions
3.2.0~RC2-3
Source reference: /affected/5/versions
3.2.0~RC2-3.1
Source reference: /affected/5/versions
3.2.0~RC2-3.2
Source reference: /affected/5/versions
3.2.0~RC2-3.3
Source reference: /affected/5/versions
3.2.0~RC3-1
Source reference: /affected/5/versions
3.2.0-1
Source reference: /affected/5/versions
3.2.2-1
Source reference: /affected/5/versions
3.2.2-1ubuntu0.26.04.1
Source reference: /affected/5/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps%2Fxenial",
      "ecosystem": "Ubuntu:Pro:16.04:LTS"
    },
    "versions": [
      "2.8.14-1ubuntu2",
      "2.8.14-1.2ubuntu1",
      "2.8.16-1ubuntu1",
      "2.8.16-1ubuntu1.1",
      "2.8.16-1ubuntu1.1+esm1",
      "2.8.16-1ubuntu1.1+esm2",
      "2.8.16-1ubuntu1.1+esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-42169.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "gimp",
          "binary_version": "2.8.16-1ubuntu1.1+esm3"
        },
        {
          "binary_name": "gimp-data",
          "binary_version": "2.8.16-1ubuntu1.1+esm3"
        },
        {
          "binary_name": "libgimp2.0",
          "binary_version": "2.8.16-1ubuntu1.1+esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps%2Fbionic",
      "ecosystem": "Ubuntu:Pro:18.04:LTS"
    },
    "versions": [
      "2.8.20-1",
      "2.8.20-1.1",
      "2.8.20-2",
      "2.8.22-1",
      "2.8.22-1ubuntu0.1~esm1",
      "2.8.22-1ubuntu0.1~esm2",
      "2.8.22-1ubuntu0.1~esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-42169.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "gimp",
          "binary_version": "2.8.22-1ubuntu0.1~esm3"
        },
        {
          "binary_name": "gimp-data",
          "binary_version": "2.8.22-1ubuntu0.1~esm3"
        },
        {
          "binary_name": "libgimp2.0",
          "binary_version": "2.8.22-1ubuntu0.1~esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps%2Ffocal",
      "ecosystem": "Ubuntu:Pro:20.04:LTS"
    },
    "versions": [
      "2.10.8-2",
      "2.10.14-2",
      "2.10.14-2build1",
      "2.10.14-2ubuntu1",
      "2.10.14-3",
      "2.10.18-1",
      "2.10.18-1ubuntu0.1",
      "2.10.18-1ubuntu0.1+esm1",
      "2.10.18-1ubuntu0.1+esm2",
      "2.10.18-1ubuntu0.1+esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-42169.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "gimp",
          "binary_version": "2.10.18-1ubuntu0.1+esm3"
        },
        {
          "binary_name": "gimp-data",
          "binary_version": "2.10.18-1ubuntu0.1+esm3"
        },
        {
          "binary_name": "libgimp2.0",
          "binary_version": "2.10.18-1ubuntu0.1+esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps%2Fjammy",
      "ecosystem": "Ubuntu:Pro:22.04:LTS"
    },
    "versions": [
      "2.10.24-2",
      "2.10.28-1",
      "2.10.30-1",
      "2.10.30-1build1",
      "2.10.30-1ubuntu0.1",
      "2.10.30-1ubuntu0.1+esm1",
      "2.10.30-1ubuntu0.1+esm2",
      "2.10.30-1ubuntu0.1+esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-42169.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "gimp",
          "binary_version": "2.10.30-1ubuntu0.1+esm3"
        },
        {
          "binary_name": "gimp-data",
          "binary_version": "2.10.30-1ubuntu0.1+esm3"
        },
        {
          "binary_name": "libgimp2.0",
          "binary_version": "2.10.30-1ubuntu0.1+esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:deb/ubuntu/gimp?arch=source&distro=esm-apps%2Fnoble",
      "ecosystem": "Ubuntu:Pro:24.04:LTS"
    },
    "versions": [
      "2.10.34-1",
      "2.10.36-1",
      "2.10.36-2",
      "2.10.36-3build2",
      "2.10.36-3build3",
      "2.10.36-3ubuntu0.24.04.1",
      "2.10.36-3ubuntu0.24.04.1+esm1",
      "2.10.36-3ubuntu0.24.04.1+esm2",
      "2.10.36-3ubuntu0.24.04.1+esm3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-42169.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "gimp",
          "binary_version": "2.10.36-3ubuntu0.24.04.1+esm3"
        },
        {
          "binary_name": "gimp-data",
          "binary_version": "2.10.36-3ubuntu0.24.04.1+esm3"
        },
        {
          "binary_name": "libgimp2.0t64",
          "binary_version": "2.10.36-3ubuntu0.24.04.1+esm3"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:deb/ubuntu/gimp?arch=source&distro=resolute",
      "ecosystem": "Ubuntu:26.04:LTS"
    },
    "versions": [
      "3.0.4-6.1",
      "3.0.4-6.2",
      "3.0.6-1",
      "3.2.0~RC2-2",
      "3.2.0~RC2-3",
      "3.2.0~RC2-3.1",
      "3.2.0~RC2-3.2",
      "3.2.0~RC2-3.3",
      "3.2.0~RC3-1",
      "3.2.0-1",
      "3.2.2-1",
      "3.2.2-1ubuntu0.26.04.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-42169.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "gimp",
          "binary_version": "3.2.2-1ubuntu0.26.04.1"
        },
        {
          "binary_name": "gimp-data",
          "binary_version": "3.2.2-1ubuntu0.26.04.1"
        },
        {
          "binary_name": "gir1.2-gimp-3.0",
          "binary_version": "3.2.2-1ubuntu0.26.04.1"
        },
        {
          "binary_name": "libgimp-3.0-0",
          "binary_version": "3.2.2-1ubuntu0.26.04.1"
        },
        {
          "binary_name": "libgimp-3.0-bin",
          "binary_version": "3.2.2-1ubuntu0.26.04.1"
        }
      ]
    }
  }
]

Related CVEs: CVE-2026-42169
Source reference: /upstream

Publisher severity

high

Source reference: /severity/1/score

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2026-42169 · High

Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

Event: #68029 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 21:20:24 GMT
Publisher date: Tue, 04 Aug 2026 04:16:00 GMT

Read the original announcement