PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-112260 Red Hat CVE debrief

A flaw in GIMP can cause a heap out-of-bounds read when opening a crafted XCF file with a malformed text-layer parasite, disclosing adjacent heap data into layer text and causing denial of service. This vulnerability affects GIMP installations, particularly in environments where untrusted XCF files may be opened. Defenders should assess exposure and prioritize verification and updates. The vulnerability class involves heap errors due to improper parsing of XCF file text-layer parasites.

Vendor
Red Hat
Product
Red Hat Enterprise Linux 10
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-19
Original CVE updated
2026-10-21
Advisory published
2026-10-19
Advisory updated
2026-10-21

Who should care

Defenders responsible for GIMP installations, especially in environments where untrusted XCF files may be opened, should assess exposure and prioritize verification and updates.

Why it matters

Defenders should prioritize verifying and updating GIMP installations, especially in environments where untrusted XCF files may be opened, to prevent potential heap out-of-bounds reads and denial of service.

  • Potential disclosure of adjacent heap data into layer text
  • Denial of service due to heap errors

Technical summary

The vulnerability occurs when GIMP attempts to parse a malformed text-layer parasite in an XCF file, leading to a heap out-of-bounds read and potential disclosure of adjacent heap data. This happens because GIMP does not properly validate the text-layer parasite data in XCF files, allowing an attacker to craft a file that triggers the vulnerability. The technical impact includes potential disclosure of adjacent heap data into layer text and denial of service due to heap errors.

Defensive priority

Defenders should prioritize verifying and updating GIMP installations, especially in environments where untrusted XCF files may be opened.

Recommended defensive actions

  • Verify and update GIMP installations to the latest version
  • Implement input validation and sanitization for XCF files
  • Monitor for suspicious XCF file openings and heap errors

Evidence notes

The CVE record and source item provide details on the heap out-of-bounds read vulnerability in GIMP's XCF text-layer parasite parsing. Evidence is based on CVE Program records and source item descriptions. The vulnerability has been publicly disclosed, but specific details about exploitation are limited. Defenders should verify GIMP installations and monitor for suspicious XCF file openings and heap errors. The source confidence is high, but the affected scope and potential impact on G

Sources and references

Verified primary and authoritative sources

  • CVE-2026-112260 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-112260

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-112260 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-112260

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.