ZDI-26-217
HIGH 7.8
Published
Mar 19, 2026
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability
GIMP
GIMP contains a remote code execution vulnerability (CVE-2026-4150) with a CVSS score of 7.8 that allows attackers to execute arbitrary code when a user opens a malicious file or visits a malicious webpage. This is a high-severity flaw that requires user interaction but gives attackers complete control over the affected system. Security teams should immediately update GIMP to the patched version, advise users to avoid opening untrusted files, and consider restricting GIMP's use in high-security environments until patches are deployed.