Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28863.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-11 | 1 | Disclosure1 |
| 2026-04-19 | 1 | General1 |
CVE-2026-4152 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i… https://www.cve.org/CVERecord?id=CVE-2026-4152
Post summary
A short disclosure of a heap-based buffer overflow in GIMP’s JP2 parser enabling remote code execution, with no PoC, patch, or active exploitation details provided.
CVE-2026-4152 Heap-based Buffer Overflow Remote Code Execution in GIMP JP2 File Parsing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4152
Post summary
This message discloses a heap-based buffer overflow that enables remote code execution in GIMP's JP2 parser, as referenced via a VulnerMon link.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gimp | gimp | 3.0.8 | - | - |