ZDI-26-218
HIGH 7.8
Published
Mar 19, 2026
GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability
GIMP
GIMP contains a remote code execution vulnerability (CVE-2026-4151) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised page, rated as HIGH severity with a CVSS score of 7.8. An attacker can gain full code execution on the affected system through this social engineering attack vector. Security teams should immediately patch GIMP installations, warn users against opening untrusted files or visiting suspicious websites, and monitor for exploitation attempts.