Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28591.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
`GIMP` XWD parsing flaw (UBUNTU-CVE-2026-2048) enables remote code execution if a malicious file is opened. Caution advised for untrusted XWDs. #GIMP #infosec #RCE https://www.pulsepatch.io/posts/ubuntu-cve-2026-2048-gimp-xwd-rce
Post summary
A GIMP XWD parsing flaw (UBUNTU-CVE-2026-2048) allows remote code execution when a malicious file is opened, warning users to avoid untrusted XWD files.
A remote code execution vulnerability affects `GIMP` via XWD file parsing (CVE-2026-2048). Review official advisories for updates. #GIMP #Infosec #CVE https://www.pulsepatch.io/posts/cve-2026-2048-gimp-xwd-file-parsing-out-of-bounds-write
Post summary
The post announces a remote code execution vulnerability in GIMP’s XWD file parsing (CVE‑2026‑2048) and urges users to check official advisories for updates.
CVE-2026-2048 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installa… https://www.cve.org/CVERecord?id=CVE-2026-2048
Post summary
The text announces a newly disclosed vulnerability (CVE-2026-2048) in GIMP’s XWD file parser that allows remote attackers to execute arbitrary code via an out-of-bounds write; no evidence of exploitation, PoC, or patch is provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gimp | gimp | 3.2.0 | - | - |