Live › vulnerability › CVE-2026-112258
Go to dashboardGIMP's XCF loader can leave a dangling pointer in its linked-channels list, which is freed later through a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone who opens XCF image files in GIMP, especially files from untrusted sources such as downloads or email attachments. The sources do not list affected version ranges, so unknown. Systems that never open XCF files in GIMP are unlikely to be exposed.
No product ranges from the sources yet.
gimp --version to see the installed GIMP version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-112258")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.