ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18304.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-457?
ZDI-26-457 has a CVSS rating of 7.8, indicating a high severity risk.
How do I fix ZDI-26-457?
To mitigate ZDI-26-457, ensure you are using the latest version of GIMP with all security patches applied.
What type of vulnerability is ZDI-26-457?
ZDI-26-457 is an integer overflow vulnerability that leads to remote code execution.
What must a user do to exploit ZDI-26-457?
An attacker can exploit ZDI-26-457 by convincing a user to open a malicious TIF file or visit a malicious webpage.
Which software is affected by ZDI-26-457?
The vulnerability ZDI-26-457 affects the GIMP image editing software.