Product

GIMP

1 mentions in 7 days · 2 in 30 days · 2 total · first seen Sep 9, 2026 · last 1d ago

Timeline2 articles

ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI disclosed CVE-2026-92183, a stack-based buffer overflow in GIMP's APNG file parsing that enables remote code execution (CVSS 7.8).

ZDI published advisory ZDI-26-713 describing a stack-based buffer overflow in GIMP's APNG file parsing, assigned CVE-2026-92183 with a CVSS score of 7.8. Remote attackers can execute arbitrary code on affected installations, but exploitation requires user interaction such as visiting a malicious page or opening a malicious file. The advisory does not mention exploitation in the wild or patch status.

ZDI Published AdvisoriesSep 16, 05:00 UTC · 1d agoVulnerability 11 sources CVE-2026-92183

ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI disclosed a CVSS 7.8 integer overflow in GIMP's PSP file parser that enables remote code execution when users open malicious files.

ZDI published advisory ZDI-26-633 for an integer overflow in GIMP's parsing of PSP image files. Remote attackers can execute arbitrary code, but exploitation requires user interaction such as opening a malicious file. ZDI assigned CVSS 7.8 and the issue is tracked as CVE-2026-4153.

ZDI Published AdvisoriesSep 9, 05:00 UTC · 8d agoAdvisory CVE-2026-41531

Related CVEsby mentions

CVE-2026-41537.8<1%
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the…
· gimp gimp—
CVE-2026-92183——
—

Appears with

organization Zero Day Initiative 2 vendor GIMP 2 vendor Zero Day Initiative 2

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.