Critical Security Vulnerability in GIMP: Remote Code Execution and Memory Disclosure
Summary
ALSA-2026:16484: Important: gimp security update. Affects gimp versions < 2:3.0.4-1.el9_7.5. Fixed in 2:3.0.4-1.el9_7.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a powerful open-source image editing software that provides a comprehensive toolbox for image manipulation, including features like layers, effects, and multi-level undo. It is widely used for tasks ranging from simple image editing to complex graphic design. However, recent vulnerabilities have exposed GIMP to significant security risks, particularly through the handling of various image file formats.
Vulnerability Detail
The vulnerabilities in GIMP stem from improper handling of specially crafted image files, which can lead to severe consequences such as memory disclosure, denial of service, and remote code execution. Specifically, issues have been identified in the parsing of PCX, XPM, ANI, JP2, PSD, and PSP files. Attackers can exploit these vulnerabilities to execute arbitrary code on the user's machine, potentially compromising sensitive data and system integrity.
How To Fix
Minimum fixed version
2:3.0.4-1.el9_7.5
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to avoid opening untrusted image files, especially those in the formats mentioned (PCX, XPM, ANI, JP2, PSD, PSP) until the software is updated. Additionally, consider using alternative image editing software for sensitive tasks.
Conclusion
The recent security vulnerabilities in GIMP highlight the importance of keeping software updated to protect against potential exploits. Users are encouraged to update their installations promptly and exercise caution when handling image files from untrusted sources.
See every vulnerability recorded for gimp →
FAQ
The vulnerabilities involve memory disclosure and remote code execution due to improper handling of certain image file formats.
If you are using a version prior to 2:3.0.4-1.el9_7.5, your installation is likely vulnerable.
Avoid opening untrusted image files and consider using alternative software until you can apply the update.
Detailed information can be found on the CVE pages linked in the advisory, including CVE-2026-4150, CVE-2026-4151, CVE-2026-4152, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887.
Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities, allowing users to stay informed about potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
