A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lea…

Medium CVSS 5.5

CVECVE-2026-6694

First seen2026-08-03 07:15 UTC

Disclosed2026-08-03 06:16 UTC

Last updated2026-08-03 07:15 UTC

Channel statusauto

Summary

A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CWE-121), causing the file-png plugin to crash and resulting in a Denial of Service (DoS) for the user.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://access.redhat.com/security/cve/CVE-2026-6694
https://bugzilla.redhat.com/show_bug.cgi?id=2459779

Timeline

2026-08-03 nvd_ingest NVD