ZDI-26-213 HIGH 7.8 Published Mar 16, 2026

GIMP LBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP

GIMP contains a remote code execution vulnerability (CVE-2026-2046) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a malicious webpage. This high-severity flaw (CVSS 7.8) requires user interaction but poses significant risk to organizations using GIMP for image editing. Security teams should prioritize patching GIMP installations, educate users about the risks of opening untrusted files, and monitor for exploitation attempts targeting this vulnerability.

Related CVE

CVE-2026-2046

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy