Description
A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.
Published: 2026-10-19
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Local Arbitrary Code Execution
Action: Patch Now
AI Analysis

Impact

A use‑after‑free flaw exists in GIMP’s XCF loader. When a crafted XCF file selects a path and that path fails to load, the loader frees memory that may still be in use, causing a crash and potentially allowing an attacker to execute arbitrary code. The vulnerability is classified as CWE‑416.

Affected Systems

The flaw affects any system running GIMP on Red Hat Enterprise Linux versions 6 through 10. No specific GIMP or RHEL release numbers are listed in the advisory, so any installation of GIMP on these platforms is potentially vulnerable.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity vulnerability. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, so broad exploitation is not currently tracked. The flaw can be leveraged locally by an attacker who can supply a malicious XCF file to a user running GIMP. Successful exploitation could lead to a crash and, in worst cases, arbitrary code execution on the affected machine.

Generated by OpenCVE AI on October 20, 2026 at 06:26 UTC.

Remediation

Vendor Workaround

Avoid opening untrusted XCF files in GIMP. If GIMP is unused, remove the gimp package.

OpenCVE Recommended Actions

  • Apply the vendor‑issued patch that fixes the XCF loader use‑after‑free in GIMP.
  • Avoid opening untrusted XCF files when GIMP is running.
  • If GIMP is not required on the system, remove the gimp package entirely.

Generated by OpenCVE AI on October 20, 2026 at 06:26 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8		 cpe:/a:redhat:enterprise_linux:10
cpe:/a:redhat:enterprise_linux:8
cpe:/o:redhat:rhel_els:6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els

Mon, 02 Nov 2026 18:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
References

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Gimp
Gimp gimp
Vendors & Products Gimp
Gimp gimp

Tue, 20 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Mon, 19 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Description A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.
Title Gimp: gimp: use-after-free in xcf loader via prop_selected_path
First Time appeared Redhat
Redhat enterprise Linux
Weaknesses CWE-416
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Gimp Gimp
Redhat Enterprise Linux Rhel Els
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-11-04T21:54:58.082Z

Reserved: 2026-10-19T13:15:03.694Z

Link: CVE-2026-112261

cve-icon Vulnrichment

Updated: 2026-10-20T15:16:20.294Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-19T22:17:05.767

Modified: 2026-11-04T22:17:48.767

Link: CVE-2026-112261

cve-icon Redhat

Severity : Important

Publid Date: 2026-10-12T00:00:00Z

Links: CVE-2026-112261 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T16:47:11Z

Weaknesses