7.8
High
CVE-2026-4154 GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability
Description
GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GIMP | 3.0.8 | No fix stated |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Versions not published |
Show the 22 other branches Hide the 22 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux AppStream E4S (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.8) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8 8100020260512115927.4 | earliest → < 8100020260512115927.4c9c024f | 8100020260512115927.4c9c024f |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260520140422.70584597 | earliest → < 8040020260520140422.70584597 | 8040020260520140422.70584597 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260520140422.70584597 | earliest → < 8040020260520140422.70584597 | 8040020260520140422.70584597 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260520140100.6 | earliest → < 8060020260520140100.6af1eaf0 | 8060020260520140100.6af1eaf0 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020260520140100.6 | earliest → < 8060020260520140100.6af1eaf0 | 8060020260520140100.6af1eaf0 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020260520140100.6 | earliest → < 8060020260520140100.6af1eaf0 | 8060020260520140100.6af1eaf0 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260520102644.0621 | earliest → < 8080020260520102644.0621e4ee | 8080020260520102644.0621e4ee |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260520102644.0621 | earliest → < 8080020260520102644.0621e4ee | 8080020260520102644.0621e4ee |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published |
References
- ZDI-26-221 www.zerodayinitiative.com
- vendor-provided URL gitlab.gnome.org
Timeline
- Published
- Last modified
Other CVEs of GIMP
The 43 CVEs of GIMP →
CVE-2026-92183
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
7.8
High
CVE-2026-18309
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability
7.8
High
CVE-2026-18308
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
7.8
High
CVE-2026-18307
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
7.8
High