ZDI-26-217 HIGH 7.8 Published Mar 19, 2026

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP

GIMP contains a remote code execution vulnerability (CVE-2026-4150) with a CVSS score of 7.8 that allows attackers to execute arbitrary code when a user opens a malicious file or visits a malicious webpage. This is a high-severity flaw that requires user interaction but gives attackers complete control over the affected system. Security teams should immediately update GIMP to the patched version, advise users to avoid opening untrusted files, and consider restricting GIMP's use in high-security environments until patches are deployed.

Related CVE

CVE-2026-4150

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy