GIMP EUVD-2026-77472

Exploitation requires that the victim open a specially crafted PSP (Paint Shop Pro) file in GIMP - the PSP loader plug-in must be present and active (it is enabled by default in standard GIMP installations). The attacker must deliver the malicious file to the victim through any channel (email attachment, web download, shared storage) and induce the victim to open it. No special GIMP configuration, elevated privileges, or network service exposure is required. Exploitation is limited by: (1) the requirement for user interaction to open the file (UI:R), (2) GIMP must be installed with the PSP plug-in available, and (3) no current KEV or POC confirmation means weaponized exploitation is not confirmed. The AV:L CVSS metric reflects local file execution, not a restriction on how the file reaches the victim.

The CVSS 7.8 score with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H is internally consistent and accurately reflects a user-assisted file-format RCE: no privileges are required of the attacker, complexity is low once the victim opens the file, and the full C/I/A triad is at risk. The local attack vector does not mean the attack is low-risk - PSP files can be delivered as email attachments, via web downloads, or through shared file systems, making the effective reach close to a phishing campaign. No EPSS score was provided, and the vulnerability is not listed in CISA KEV, indicating no confirmed active exploitation at time of analysis. The absence of a specific patched GIMP version in the available data is a gap; only a GNOME GitLab work item and Red Hat Bugzilla entry are referenced, with no confirmed upstream release containing the fix. Overall this is a genuine priority for organizations deploying GIMP in environments where users regularly open externally sourced image files.

An attacker crafts a malicious PSP image file with an oversized compressed selection channel whose decompressed size exceeds the allocation in GIMP's PSP loader. The file is delivered to a GIMP user as an email attachment or a download link. When the victim opens the file in GIMP, the decompression routine writes beyond the heap buffer boundary, corrupting adjacent memory structures and potentially redirecting execution to attacker-controlled shellcode. No public proof-of-concept exploit has been identified at time of analysis.