CVE-2026-4150

EUVD-2026-21630
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 52.33%
Affected Products (NVD)
VendorProductVersion
gimpgimp
3.0.8
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
2:2.8.22-1.el7_9.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
8100020260512115927.4c9c024f ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
8040020260520140422.70584597 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
8040020260520140422.70584597 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
8060020260520140100.6af1eaf0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
8060020260520140100.6af1eaf0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
8060020260520140100.6af1eaf0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
8080020260520102644.0621e4ee ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
8080020260520102644.0621e4ee ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
2:3.0.4-1.el9_7.5 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
2:3.0.4-4.el9_8.4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
2:2.99.8-3.el9_0.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
2:2.99.8-4.el9_2.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
2:2.99.8-4.el9_4.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
2:2.99.8-4.el9_6.7 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
gimp
bookworm
2.10.34-1+deb12u10
fixed
bookworm (security)
2.10.34-1+deb12u10
fixed
bullseye
vulnerable
bullseye (security)
2.10.22-4+deb11u8
fixed
forky
3.2.4-3
fixed
sid
3.2.4-3
fixed
trixie
3.0.4-3+deb13u9
fixed
trixie (security)
3.0.4-3+deb13u8
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gimp
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
not-affected
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
gimp
suse enterprise desktop 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise sap 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise server 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise workstation 15 SP7
2.10.30-150400.3.50.1
fixed
gimp-devel
suse enterprise desktop 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise sap 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise server 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise workstation 15 SP7
2.10.30-150400.3.50.1
fixed
gimp-lang
suse enterprise desktop 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise sap 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise server 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise workstation 15 SP7
2.10.30-150400.3.50.1
fixed
libgimp-2_0-0
suse enterprise desktop 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise sap 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise server 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise workstation 15 SP7
2.10.30-150400.3.50.1
fixed
libgimpui-2_0-0
suse enterprise desktop 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise sap 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise server 15 SP7
2.10.30-150400.3.50.1
fixed
suse enterprise workstation 15 SP7
2.10.30-150400.3.50.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gimp
RHEL 9
2:3.0.4-4.el9_8.4
fixed
gimp-libs
RHEL 9
2:3.0.4-4.el9_8.4
fixed
Common Weakness Enumeration
References
https://gitlab.gnome.org/GNOME/gimp/-/commit/00afdabdadeb5457fd897878b1e5aebc3780af10
https://www.zerodayinitiative.com/advisories/ZDI-26-217/
https://access.redhat.com/errata/RHSA-2026:16484
https://access.redhat.com/errata/RHSA-2026:17533
https://access.redhat.com/errata/RHSA-2026:19362
https://access.redhat.com/errata/RHSA-2026:20552
https://access.redhat.com/errata/RHSA-2026:20553
https://access.redhat.com/errata/RHSA-2026:20554
https://access.redhat.com/errata/RHSA-2026:20691
https://access.redhat.com/errata/RHSA-2026:25899
https://access.redhat.com/errata/RHSA-2026:25901
https://access.redhat.com/errata/RHSA-2026:25907
https://access.redhat.com/errata/RHSA-2026:26168
https://access.redhat.com/security/cve/CVE-2026-4150
https://bugzilla.redhat.com/show_bug.cgi?id=2457535
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4150.json