CVE-2026-2050

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR (High Dynamic Range) files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file, leading to arbitrary code execution within the context of the current process.

This Important vulnerability in GIMP allows for arbitrary code execution through a heap-based buffer overflow during HDR file parsing. Successful exploitation requires user interaction, where an attacker must persuade a user to open a malicious file. This prerequisite reduces the immediate threat compared to remote, unauthenticated flaws, but the potential for system compromise warrants an Important rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.