CVE-2026-2045Disclosure(gimp / gimp)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28265.

gimp CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://gitlab.gnome.org/GNOME/gimp/-/commit/68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275

Vendor / third-party advisories

https://www.zerodayinitiative.com/advisories/ZDI-26-119/

Other references

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gimp

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-20); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

gimp

Products

gimp

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

PulsePatch.io@pulsepatchio226d
Disclosure
`GIMP` is affected by UBUNTU-CVE-2026-2045, an RCE vulnerability exploitable via malicious XWD files. User interaction is required. Monitor for official updates. #GIMP #infosec #RCE https://www.pulsepatch.io/posts/ubuntu-cve-2026-2045-gimp-rce-vulnerability
Post summary
The post announces that GIMP is affected by UBUNTU‑CVE‑2026‑2045, an RCE vulnerability triggered by malicious XWD files, and advises users to watch for official updates.
0000069
1 followersView on X
CVE@CVEnew229d
Disclosure
CVE-2026-2045 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa… https://www.cve.org/CVERecord?id=CVE-2026-2045
Post summary
The text announces CVE-2026-2045 as a GIMP XWD file parsing out-of-bounds write leading to remote code execution, without providing PoC, exploit details, active exploitation evidence, or patch information.
0000063
56.4K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gimp	gimp	3.0.6	-	-

Explore more

Back to dashboard gimp CVEs gimp vulnerabilities