Description
GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28265.
Metrics
CVSS 3.1 7.3/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| GIMP | GIMP | 3.0.6 |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 6 | — |
| Red Hat | Red Hat Enterprise Linux 7 | — |
References
- https://gitlab.gnome.org/GNOME/gimp/-/commit/68b27dfb1cbd9b3f22d7fa624dbab8647ee5f275Issue Tracking, Patch, Third Party Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-26-119/Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:4173
- https://access.redhat.com/errata/RHSA-2026:5113
- https://access.redhat.com/errata/RHSA-2026:5388
- https://access.redhat.com/errata/RHSA-2026:5389
- https://access.redhat.com/errata/RHSA-2026:5390
- https://access.redhat.com/errata/RHSA-2026:5391
- https://access.redhat.com/errata/RHSA-2026:5434
- https://access.redhat.com/errata/RHSA-2026:5435
- https://access.redhat.com/errata/RHSA-2026:5436
- https://access.redhat.com/errata/RHSA-2026:5437
- https://access.redhat.com/security/cve/CVE-2026-2045
- https://bugzilla.redhat.com/show_bug.cgi?id=2441522
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2045.json
Timeline
- Published
- Feb 20, 2026
- Last modified
- Jul 15, 2026
- NVD status
- Modified