Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-11 | 1 | Disclosure1 |
| 2026-04-19 | 1 | Disclosure1 |
| 2026-04-21 | 1 | Patch1 |
🚨 CVE-2026-4153 | CVSS 7.8 HIGH GIMP heap buffer overflow in PSP file parsing enables RCE. User interaction required (open malicious file). Affects current GIMP installations. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/09cKbDuOah
Post summary
The tweet alerts users to a heap-buffer overflow in GIMP’s PSP parser that allows remote code execution and urges immediate patching.
CVE-2026-4153 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i… https://www.cve.org/CVERecord?id=CVE-2026-4153
Post summary
A new heap‑based buffer overflow in GIMP’s PSP file parser, CVE‑2026‑4153, allows remote attackers to execute arbitrary code; no exploits, patches or active usage details are shared.
CVE-2026-4153 Heap-Based Buffer Overflow in GIMP PSP File Parsing Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4153
Post summary
The text announces CVE‑2026‑4153 as a heap‑based buffer overflow in GIMP PSP file parsing that could enable remote code execution, but provides no PoC, exploit code, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gimp | gimp | 3.0.8 | - | - |