CVE-2026-18302: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29398.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate by preventing untrusted users from opening/processing malicious TIF files or visiting malicious pages (since user interaction is required: open a malicious file or visit a malicious page).
- Compensating control
Apply compensating protections appropriate for remote code execution risks until a patch is available (e.g., restrict and sandbox GIMP usage when handling untrusted TIF files).
Event History
Frequently Asked Questions
Does exploitation require prior authentication or privileges on the target system?
No. The CVSS vector lists Privileges Required as None (PR:N), although exploitation still requires the target user to interact with malicious content.