CVE-2026-4153 GIMP CVE debrief

Who should care

This vulnerability affects users of GIMP, particularly those who open PSP files from untrusted sources. Organizations using GIMP in their workflow should prioritize patching this vulnerability to prevent potential code execution attacks. Additionally, users who visit malicious websites or open suspicious files may be vulnerable to exploitation.

Technical summary

The vulnerability exists within the parsing of PSP files in GIMP. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. The vulnerability has been assigned CVE-2026-4153 and has a CVSS vector of CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Defensive priority

High priority should be given to patching this vulnerability, as it allows for remote code execution. Organizations should ensure that all GIMP installations are updated to the latest version, and users should be cautious when opening PSP files from untrusted sources.

Recommended defensive actions

• Patch GIMP installations to the latest version
• Implement input validation and sanitization for PSP file parsing
• Restrict user access to untrusted PSP files
• Monitor GIMP installations for suspicious activity
• Consider implementing compensating controls, such as file type restrictions or additional security layers

Evidence notes

The vulnerability was reported by ZDI-CAN-28874 and has been confirmed by the GIMP development team. The CVE record and NVD detail provide additional information on the vulnerability. Red Hat has also released errata related to this vulnerability.

Official resources