ZDI-26-220 HIGH 7.8 Published Mar 19, 2026

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP

GIMP contains a remote code execution vulnerability (CVE-2026-4153) that allows attackers to execute arbitrary code if a user opens a malicious file or visits a malicious webpage, rated as HIGH severity with a CVSS score of 7.8. This poses a significant risk to users who work with untrusted image files or browse compromised websites. Security teams should prioritize patching GIMP installations, alert users to avoid opening files from untrusted sources, and monitor for exploitation attempts targeting this vulnerability.

Related CVE

CVE-2026-4153

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy