ZDI-26-221 HIGH 7.8 Published Mar 19, 2026

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP

A high-severity remote code execution vulnerability (CVE-2026-4154) affects GIMP and allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised webpage. This represents a significant security risk since GIMP is widely used for image editing across organizations. Security teams should prioritize patching GIMP installations, restrict user access to untrusted files and websites, and monitor for exploitation attempts targeting this vulnerability.

Related CVE

CVE-2026-4154

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy