ZDI-26-050 HIGH 7.8 Published Jan 30, 2026

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP

A high-severity remote code execution vulnerability (CVE-2026-0797, CVSS 7.8) has been discovered in GIMP that allows attackers to execute arbitrary code on affected systems when users open malicious files or visit compromised websites. This vulnerability requires user interaction to exploit, making social engineering a potential attack vector. Security teams should prioritize updating GIMP to patched versions and educate users about the risks of opening files from untrusted sources.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy