ZDI-26-218 HIGH 7.8 Published Mar 19, 2026

GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP

GIMP contains a remote code execution vulnerability (CVE-2026-4151) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised page, rated as HIGH severity with a CVSS score of 7.8. An attacker can gain full code execution on the affected system through this social engineering attack vector. Security teams should immediately patch GIMP installations, warn users against opening untrusted files or visiting suspicious websites, and monitor for exploitation attempts.

Related CVE

CVE-2026-4151

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy