ZDI-26-118
HIGH 7.8
Published
Feb 19, 2026
GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability
GIMP
GIMP contains a remote code execution vulnerability (CVE-2026-2044, CVSS 7.8) that allows attackers to execute arbitrary code when a user opens a malicious file or visits a compromised webpage. This high-severity flaw requires user interaction but poses a significant risk to any organization using GIMP. Security teams should prioritize patching affected installations immediately and consider restricting GIMP usage until updates are available, while educating users to avoid opening untrusted files.