CVE-2026-18307

GIMP's TIF file parser fails to validate user-supplied data length before copying to a heap buffer, enabling arbitrary code execution in the user's process context after they open a malicious TIFF file. No in-the-wild exploitation is reported; a fix commit is referenced at the GitLab GNOME reposi...

EUVD-2026-63456

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2026-18307 GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2026-18306 GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

EUVD-2026-63455

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18306

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18306

GIMP's SGI file parser lacks validation of user-supplied data, causing an integer overflow (CWE-190) before writing to memory. An attacker can exploit this by tricking a user into opening a malicious SGI file, enabling arbitrary code execution in the current process context. CVSS 7.8 (HIGH) refle...

CVE-2026-18306 GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18305 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18305

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18305

GIMP's TIF file parser is vulnerable to a CWE-190 integer overflow (ZDI-CAN-29406) caused by insufficient validation of user-supplied data before buffer allocation, allowing an attacker to trigger an overflow and execute arbitrary code in the current process context. Exploitation requires user in...

EUVD-2026-63454

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18305 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18304 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

EUVD-2026-63453

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18304

GIMP's TIF file parser fails to validate user-supplied data, causing an integer overflow during buffer allocation (CWE-190) that enables remote code execution when a user opens a malicious TIF file. Exploitation requires user interaction. A fix is available via the linked GitLab commit ad32d22c34...

CVE-2026-18304 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18304

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

EUVD-2026-63452

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2026-18303

GIMP (GNU Image Manipulation Program) is affected by a stack-based buffer overflow in its TIF file parser . The root cause is insufficient validation of user-supplied data length before copying it to a stack-based buffer, allowing a remote attacker to achieve arbitrary code execution in the conte...