CVE-2026-2044

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in GIMP's parsing of PGM files due to a lack of proper memory initialization before access. This can allow a remote attacker to execute arbitrary code on affected systems. User interaction is required, specifically the target must open a malicious file or visit a malicious page. The issue was identified as ZDI-CAN-28158.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.