CVE-2026-18304

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.

This vulnerability is rated as having an Important impact because successful exploitation allows arbitrary code execution within the context of the active user session. In Red Hat Enterprise Linux, GIMP is an interactive graphical image editor typically installed on desktop workstations rather than headless servers, and it does not operate as a background daemon or listening service. Exploitation is constrained by the requirement for explicit user interaction to open a specially crafted TIFF file, with the overall blast radius limited to the permissions of the targeted local account.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Since this vulnerability requires user interaction with a malicious file, users should exercise caution when opening TIF image files from untrusted sources. To further reduce risk, consider running GIMP within a sandboxed environment, such as a container or Flatpak, to limit the potential impact of a successful exploit.