Remote Code Execution Vulnerability in GIMP TIF File Parsing by GIMP

CVE-2026-18305

What is CVE-2026-18305?

A vulnerability exists in the TIF file parsing process of GIMP, where improper validation of user-supplied data can lead to an integer overflow. This flaw may allow malicious actors to execute arbitrary code on systems where GIMP is installed. To exploit this vulnerability, a user must either open a specially crafted TIF file or visit a web page containing a malicious TIF file. Such exploits can compromise system integrity and require immediate attention to prevent potential attacks.

References