CVE-2026-125218

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encodeapng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNGDISPOSEOPBACKGROUND memset writes past prevfram...

EUVD-2026-120307

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encodeapng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNGDISPOSEOPBACKGROUND memset writes past prevfram...

CVE-2026-125218 FFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encodeapng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNGDISPOSEOPBACKGROUND memset writes past prevfram...

CVE-2026-125218

FFmpeg versions through 9.0.2 are vulnerable to a heap buffer overflow in the APNG encoder's encode_apng() function located in libavcodec/pngenc.c. The root cause occurs when the resolution of media grows mid-stream, triggering APNG_DISPOSE_OP_BACKGROUND memset writes that extend beyond the prev_...

CVE-2026-125218 FFmpeg through 9.0.2 APNG Encoder Heap Buffer Overflow via encode_apng()

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encodeapng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNGDISPOSEOPBACKGROUND memset writes past prevfram...

PT-2026-141046

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode apng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNG DISPOSE OP BACKGROUND memset writes past prev...

CVE-2026-125218: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode_apng() function in…

FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encodeapng function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNGDISPOSEOPBACKGROUND memset writes past prevfram...

pillow: pillow: Denial of service via crafted APNG image

A flaw was found in Pillow. A remote attacker can trigger a Denial of Service DoS by providing a specially crafted Animated Portable Network Graphics APNG image. Pillow allocates memory for the full canvas dimensions before validating safety size limits during initial file opening. Processing suc...

pillow: pillow: Denial of service via crafted APNG image

A flaw was found in Pillow. A remote attacker can trigger a Denial of Service DoS by providing a specially crafted Animated Portable Network Graphics APNG image. Pillow allocates memory for the full canvas dimensions before validating safety size limits during initial file opening. Processing suc...

pillow: pillow: Denial of service via crafted APNG image

A flaw was found in Pillow. A remote attacker can trigger a Denial of Service DoS by providing a specially crafted Animated Portable Network Graphics APNG image. Pillow allocates memory for the full canvas dimensions before validating safety size limits during initial file opening. Processing suc...

Exploit for CVE-2026-92183

CVE-2026-92183: GIMP APNG tRNS Stack Buffer Overflow → RCE...

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)

A heap-buffer-overflow vulnerability exists in the APNG Animated PNG file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to...

pillow: pillow: Denial of service via crafted APNG image

A flaw was found in Pillow. A remote attacker can trigger a Denial of Service DoS by providing a specially crafted Animated Portable Network Graphics APNG image. Pillow allocates memory for the full canvas dimensions before validating safety size limits during initial file opening. Processing suc...

BIT-PILLOW-2026-112399 Pillow: APNG background disposal allocates full canvas before decompression bomb check

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OPPREVIO...

PT-2026-123471

Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A crafted APNG with a small first frame, a very large declared canvas, and background disposal or first-frame OP...

UBUNTU-CVE-2026-92183

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Executi...

GHSA-5XM2-6676-QCP9 Pillow: APNG background disposal allocates full canvas before decompression bomb check

============================================================================ APNG background disposal allocates full canvas before decompression bomb check Location: src/PIL/PngImagePlugin.py:1000 in PngImageFile.seek Commit: a707c6b21c313880d0771e54965d142dd42358b6...

Pillow: APNG background disposal allocates full canvas before decompression bomb check

============================================================================ APNG background disposal allocates full canvas before decompression bomb check Location: src/PIL/PngImagePlugin.py:1000 in PngImageFile.seek Commit: a707c6b21c313880d0771e54965d142dd42358b6...

EUVD-2026-104635

Pillow: APNG background disposal allocates full canvas before decompression bomb check...

CVE-2026-92183

A flaw was found in GIMP. This flaw allows an attacker to achieve arbitrary code execution by tricking a user into opening a specially crafted Animated Portable Network Graphics APNG image. The vulnerability is caused by a stack-based buffer overflow resulting from improper validation of data...