Junglewise Threat Intelligence

CVE-2026-4150: GIMP PSD file parsing integer overflow

CVE-2026-4150 · Severity: high · CVSS 7.8 · Published 2026-04-11

Technologies: Red Hat Enterprise Linux, Gimp. Vendors: Red Hat, Gimp.

Executive brief

GIMP, a popular open-source image editor, is vulnerable to a security flaw when processing Photoshop (PSD) files. An attacker can create a malicious image file that, if opened by a user, allows the attacker to take control of the computer and execute unauthorized commands. This could lead to the theft of sensitive data or a complete system compromise.

Technical details

An integer overflow vulnerability exists in GIMP's PSD file parsing logic due to insufficient validation of user-supplied data before memory buffer allocation. By providing a specially crafted PSD file, an attacker can trigger the overflow, leading to a heap-based buffer overflow or similar memory corruption. This vulnerability requires user interaction, as a target must manually open the malicious file or visit a page that triggers the file's processing. Successful exploitation allows for arbitrary code execution within the context of the GIMP process. Patches have been released by GIMP and downstream vendors like Red Hat to address the flaw by improving input validation.

Affected products

  • GIMP GIMP 3.0.4-1, 2.8.22-26
  • Red Hat Enterprise Linux 8, 9

Timeline

  • 2026-03-05: disclosed: Vulnerability reported to vendor
  • 2026-03-19: advisory: Coordinated public release by ZDI
  • 2026-04-11: other: NVD publication date
  • 2026-05-12: patched: Red Hat released security updates (RHSA-2026:16484)

References

Related threats