ZDI-26-213
HIGH 7.8
Published
Mar 16, 2026
GIMP LBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP
GIMP contains a remote code execution vulnerability (CVE-2026-2046) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a malicious webpage. This high-severity flaw (CVSS 7.8) requires user interaction but poses significant risk to organizations using GIMP for image editing. Security teams should prioritize patching GIMP installations, educate users about the risks of opening untrusted files, and monitor for exploitation attempts targeting this vulnerability.