PT-2026-26458

CVE-2026-4151

·

Published

2026-03-05

·

Updated

2026-05-19

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)
Description A flaw exists in the parsing of ANI files due to insufficient validation of user-supplied data, leading to an integer overflow before buffer allocation. This can allow remote attackers to execute arbitrary code on affected GIMP installations. User interaction is required, such as visiting a malicious page or opening a malicious file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:16484
ALSA-2026:19362
OESA-2026-1955
OESA-2026-1956
OESA-2026-1957
OESA-2026-1958
OPENSUSE-SU-2026:20428-1
RHSA-2026:16484
RHSA-2026:19362
ZDI-26-218
Found an issue in the description? Have something to add? Feel free to write us 👾