Homepage

Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package pygtk2-doc  (opens in a new tab)

Threat Intelligence

EPSS
0.23% (13th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-ALMALINUX8-PYGTK2DOC-21348064
  • published21 Oct 2026
  • disclosed5 Oct 2026
Report a new vulnerability Found a mistake?

Introduced: 5 Oct 2026

NewCVE-2026-90948  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The AlmaLinux security team deemed this advisory irrelevant for AlmaLinux:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream pygtk2-doc package and not the pygtk2-doc package as distributed by AlmaLinux.

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.