{"id":"CVE-2026-112260","kind":"vulnerability","aliases":["CVE-2026-112260"],"related":[],"title":"GIMP: crafted XCF file leaks heap memory and crashes the editor","description":"A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.","summary":"A malformed text-layer parasite in an XCF image file makes GIMP read past a heap buffer. The read can copy neighbouring heap data into the layer text and can crash the program.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","gimp","linux","macos","package","windows"],"not_affected_if":["no-untrusted-xcf"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-19T20:17:52+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","triaged_at":"2026-10-25T03:34:52+00:00","updated_at":"2026-10-25T03:34:52+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T03:34:52Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"GIMP: crafted XCF file leaks heap memory and crashes the editor","impact":"low","summary":"A malformed text-layer parasite in an XCF image file makes GIMP read past a heap buffer. The read can copy neighbouring heap data into the layer text and can crash the program.","category":"package","nicknames":[],"who_cares":["gimp","desktop","linux","windows","macos"],"confidence":0.5,"needs_auth":"no","worst_case":"Heap data leaks into layer text and GIMP crashes on open.","analyst_note":"Check the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-112260 for affected and fixed GIMP versions.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["no-untrusted-xcf"],"who_is_affected":"Anyone who opens untrusted XCF files in GIMP is exposed, most likely on desktop workstations. Systems that never open XCF files from outside sources can skip it. unknown for exact affected GIMP versions.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000536,"input_tokens":3262,"output_tokens":419,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-112260':14A,17A '-2026':13A,16A 'adjac':85C 'bound':82C 'buffer':41B 'caus':76C,92C 'copi':45B 'craft':2A,66C 'crash':9A,55B 'cve':12A,15A 'data':48B,87C 'denial':93C 'desktop':18B 'disclos':84C 'editor':11A 'file':4A,34B 'flaw':59C 'found':61C 'gimp':1A,19B,36B,63C 'heap':6A,40B,47B,78C,86C 'imag':33B 'layer':28B,51B,73C,89C 'leak':5A 'linux':20B 'maco':21B 'make':35B 'malform':25B,70C 'memori':7A 'neighbour':46B 'open':64C 'out-of-bound':79C 'packag':22B 'parasit':29B,74C 'past':38B 'program':57B 'read':37B,43B,83C 'servic':95C 'text':27B,52B,72C,90C 'text-lay':26B,71C 'window':23B 'xcf':3A,32B,67C","nicknames":[],"mitigations":[],"who_affected":"Anyone who opens untrusted XCF files in GIMP is exposed, most likely on desktop workstations. Systems that never open XCF files from outside sources can skip it. unknown for exact affected GIMP versions.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T20:17:52+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112260","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112260","severity":null,"published_at":"2026-10-19T20:17:52+00:00","modified_at":"2026-10-19T22:17:05+00:00","first_seen_at":"2026-10-23T21:57:19+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}