Integer Overflow Vulnerability in GIMP Affecting TIF File Parsing

CVE-2026-18308

What is CVE-2026-18308?

This vulnerability affects GIMP's handling of TIF file parsing and could allow remote attackers to execute arbitrary code on compromised installations. The flaw arises due to inadequate validation of user-supplied data during file processing. When a malicious TIF file is opened, it can trigger an integer overflow, leading to potentially exploitable conditions in the application's memory. To be vulnerable, the user must engage with the malicious file, thereby opening avenues for remote code execution under the context of the current user.

References