A flaw in GIMP's file‑png plugin allows a remote attacker to craft an Animated Portable Network Graphics (APNG) file with an oversized tRNS chunk that triggers a stack‑based buffer overflow (CWE‑120) and crashes the plugin, resulting in a denial of service for the end user. The attack exploits improper bounds checking during APNG decoding and can be triggered without authentication, causing the application to terminate or become unresponsive.

The vulnerability affects GIMP running on Red Hat Enterprise Linux 6, 7, 8, and 9. Any system that has GIMP installed and processes APNG images is potentially impacted, regardless of the Linux distribution version. No specific GIMP version numbers are listed, but the issue resides in the file‑png plugin component.

The CVSS score of 5.5 indicates a moderate severity. EPSS is not available, and the vulnerability is not listed in CISA KEV. The likely attack vector is delivery of a malicious APNG file to a user who opens or imports it in GIMP—this could occur via email, web browsing, or shared media. Once the attacker provides the file, the plugin crash is automatic, denying service to that user’s session.