Remote Code Execution Vulnerability in GIMP Affected by PSD File Parsing Flaw

CVE-2026-4150

What is CVE-2026-4150?

A vulnerability exists in the GIMP application related to the parsing of PSD files, allowing remote attackers to execute arbitrary code. This issue arises due to improper validation of user-supplied data, leading to an integer overflow that can occur during buffer allocation. Attackers can exploit this flaw by luring users into visiting malicious pages or opening crafted files, executing code within the context of the affected process. Awareness and updates are crucial for users to protect against such vulnerabilities.

References