CVE-2026-4152

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists within the parsing of JP2 files, resulting from insufficient validation of user-supplied data length before copying it to a heap-based buffer. This can allow a remote attacker to execute arbitrary code on affected installations of GIMP. User interaction is required, specifically the target must open a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.