7.8

CVE-2026-4154

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gimp ≫ Gimp Version3.0.8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.44
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
zdi-disclosures@trendmicro.com 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://www.zerodayinitiative.com/advisories/ZDI-26-221/
Third Party Advisory
https://gitlab.gnome.org/GNOME/gimp/-/commit/2e7ed91793792d9e980b2df4c829e9aa60459253
Patch
https://access.redhat.com/errata/RHSA-2026:16484
https://access.redhat.com/errata/RHSA-2026:17533
https://access.redhat.com/errata/RHSA-2026:19362
https://access.redhat.com/errata/RHSA-2026:20552
https://access.redhat.com/errata/RHSA-2026:20553
https://access.redhat.com/errata/RHSA-2026:20554
https://access.redhat.com/errata/RHSA-2026:20691
https://access.redhat.com/errata/RHSA-2026:25899
https://access.redhat.com/errata/RHSA-2026:25901
https://access.redhat.com/errata/RHSA-2026:25907
https://access.redhat.com/errata/RHSA-2026:26168
https://access.redhat.com/security/cve/CVE-2026-4154
https://bugzilla.redhat.com/show_bug.cgi?id=2457530
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4154.json