ZDI-26-220
HIGH 7.8
Published
Mar 19, 2026
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP
GIMP contains a remote code execution vulnerability (CVE-2026-4153) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a malicious webpage, rated as HIGH severity with a CVSS score of 7.8. This poses a significant risk to users who work with untrusted image files or browse compromised websites. Security teams should prioritize patching GIMP installations, alert users to avoid opening files from untrusted sources, and monitor for exploitation attempts targeting this vulnerability.