ZDI-26-118 HIGH 7.8 Published Feb 19, 2026

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

GIMP

GIMP contains a remote code execution vulnerability (CVE-2026-2044, CVSS 7.8) that allows attackers to execute arbitrary code when a user opens a malicious file or visits a compromised webpage. This high-severity flaw requires user interaction but poses a significant risk to any organization using GIMP. Security teams should prioritize patching affected installations immediately and consider restricting GIMP usage until updates are available, while educating users to avoid opening untrusted files.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy