EUVD-2026-104589
GHSA-q33m-7rv9-85g4
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted XCF image to victim
-
DeliveryVictim opens file in GIMP
-
ExploitMalformed text-layer parasite triggers heap OOB read
-
ExecutionAdjacent heap data copied into layer text
-
ImpactInformation disclosure and application crash
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a user to open a maliciously crafted XCF (GIMP native format) file that contains a malformed text-layer parasite; the flaw is in GIMP's XCF text-layer parasite parsing specifically. Limiting factors that reduce real-world risk: the attack is local (AV:L) with no network vector, and it mandatorily requires victim user interaction (UI:R) - the victim must be social-engineered into opening the attacker-supplied file in GIMP. No authentication or special non-default configuration is needed (PR:N); any default GIMP installation that opens the crafted file is affected. |
| Impact | This is a moderate-priority issue that should not be treated as an urgent remote threat. The provided CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H, base 7.1) is internally consistent with the description: exploitation is local (AV:L) and requires the victim to open a crafted XCF file (UI:R), yielding heap memory disclosure (C:H) and a crash (A:H) with no integrity impact (I:N). No EPSS score, CISA KEV listing, SSVC decision, or public POC was supplied, so there is no evidence of active exploitation or automatability - per the precision rules this is 'no public exploit identified at time of analysis.' The signals do not conflict, but several are simply absent. The practical risk is bounded by the file-open requirement and local vector: this is a user-tricked-into-opening-a-file scenario rather than a wormable or server-side flaw. The C:H rating (full heap read disclosed into layer text) is the most notable element, as it could leak sensitive adjacent memory, but realistic impact depends on social-engineering a target into opening an attacker-supplied image. |
| Exploit ScenarioDerived | An attacker crafts a malicious XCF image containing a malformed text-layer parasite and delivers it to a victim (e.g., via email, chat, or a download) who opens it in GIMP. When GIMP parses the parasite, it reads past the bounds of a heap buffer, copying adjacent heap memory into the layer's text (disclosing potentially sensitive data) and/or crashing the application. No public exploit code was identified in the provided data. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 19, 2026
Heap out-of-bounds read in GIMP's XCF text-layer parasite parsing allows a crafted .xcf file, opened by a victim, to leak adjacent heap memory into layer text and crash the application, causing information disclosure and denial of service. The issue is local and requires user interaction (CVSS 7.1, AV:L/UI:R/PR:N), and the provided intelligence shows no public exploit or CISA KEV entry; it is a moderate-priority issue rather than an urgent remote threat.
RemediationAI
No fixed GIMP version is identified in the provided data; monitor the Red Hat CVE page and Bugzilla record and apply updated gimp packages through the relevant RHSA when they become available. Until then, avoid opening untrusted or unsolicited .xcf files in GIMP, especially from email or downloads; run GIMP in a sandboxed or containerized environment with limited filesystem access, accepting that this may restrict plugin and local-resource access; and operate GIMP as a low-privileged user so a crash or memory disclosure has reduced impact. Because the attack requires local file interaction and has no network vector, blocking network access to GIMP is not a primary control, but restricting automatic opening or previewing of untrusted XCF content reduces exposure at the cost of some workflow convenience.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
GIMP's native XCF format supports parasites, which are metadata blobs attached to layers; the text-layer parasite stores text properties and is parsed when an XCF file is opened. A malformed parasite can cause the parser to read beyond the bounds of a heap buffer (CWE-125), where the out-of-bounds bytes may be copied into the layer's text content and/or trigger a crash. The CPE data identifies GIMP as shipped in Red Hat Enterprise Linux 6, 7, 8, 9, and 10 as affected platforms, though the underlying flaw is in GIMP's XCF parsing rather than in the operating system itself. Because the trigger is a local file opened by the user, exploitation depends on social engineering rather than network reachability.
Know when Gimp gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Local file-parsing flaw needing victim to open a crafted XCF (AV:L/UI:R, PR:N); heap disclosure gives C:H, crash gives A:H, no integrity impact (I:N).
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
DescriptionCVE.org
A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.
Executive ViewAI
GIMP's XCF text-layer parsing contains a heap out-of-bounds read (CVE-2026-112260) that can leak adjacent memory into layer text and crash the application when a user opens a crafted file, affecting users who handle untrusted image files. Because exploitation requires local file interaction and no public exploit identified at time of analysis, the immediate organizational risk is targeted phishing or accidental exposure rather than a broad remote threat. Leadership should prioritize user awareness, file-handling controls, and patch monitoring for this moderate-priority desktop application issue.
No vendor-released patch identified at time of analysis. Restrict opening of .xcf files to trusted sources, run GIMP in a sandboxed environment (e.g., Windows Sandbox, firejail, bubblewrap), block .xcf attachments at email and web gateways, and monitor the vendor advisory for a patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Affected Products (CPE)CVE.org
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and p
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attack
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. Rated high sev
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Rated medium severity (CVSS 5.5), this vulnerability is no a
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that alre
Critical remote code execution vulnerability in GIMP's ICO file parser caused by an integer overflow (CWE-190) that lack
Remote code execution in GIMP 3.0.6 allows attackers to run arbitrary code by tricking a user into opening a malicious P
Remote code execution in GIMP 3.2.0-rc1 lets attackers run arbitrary code by tricking a user into opening a malicious IC
Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cau
Heap-based buffer overflow in GIMP's TIF file parser enables remote code execution when a user opens a crafted TIFF imag
Exploit-DB