CVE-2026-18308

A flaw was found in GIMP. This vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required, as the target must open a malicious TIF (Tagged Image File Format) file or visit a malicious page. The issue stems from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before a buffer is allocated. This allows an attacker to execute code within the context of the current process.

Red Hat has evaluated this vulnerability as having an Important severity impact because successful exploitation can allow arbitrary code execution with the permissions of the local user running the application. Although exploitation requires social engineering to trick an individual into opening a specially crafted TIFF image, GIMP is commonly used in workstation environments to process external graphical assets. In default Red Hat Enterprise Linux server installations, GIMP is not installed or enabled, restricting exposure primarily to desktop deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.