ZDI-26-050
HIGH 7.8
Published
Jan 30, 2026
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP
A high-severity remote code execution vulnerability (CVE-2026-0797, CVSS 7.8) has been discovered in GIMP that allows attackers to execute arbitrary code on affected systems when users open malicious files or visit compromised websites. This vulnerability requires user interaction to exploit, making social engineering a potential attack vector. Security teams should prioritize updating GIMP to patched versions and educate users about the risks of opening files from untrusted sources.