ZDI-26-221
HIGH 7.8
Published
Mar 19, 2026
GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability
GIMP
A high-severity remote code execution vulnerability (CVE-2026-4154) affects GIMP and allows attackers to execute arbitrary code if a user opens a malicious file or visits a compromised webpage. This represents a significant security risk since GIMP is widely used for image editing across organizations. Security teams should prioritize patching GIMP installations, restrict user access to untrusted files and websites, and monitor for exploitation attempts targeting this vulnerability.