PT-2026-21391 · Gimp+1 · Gimp+1

CVE-2026-2050

·

Published

2026-01-01

·

Updated

2026-08-22

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)
Description A heap-based buffer overflow exists during the parsing of HDR files. This occurs because the software fails to properly validate the length of user-supplied data before copying it to a heap-based buffer. A remote attacker can exploit this by inducing a user to open a malicious file or visit a malicious page, allowing the execution of arbitrary code within the context of the current process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

DoS

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:38485
ALSA-2026:38497
CVE-2026-2050
MGASA-2026-0047
OESA-2026-1715
RHSA-2026:38485
RHSA-2026:38497
RHSA-2026:56963
RHSA-2026:56964
RHSA-2026:56982
ZDI-26-282

Affected Products

Gimp
Rocky Linux