CVE-2026-18303
Received Received - Intake

Stack-based Buffer Overflow in GIMP via TIF File Parsing

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Zero Day Initiative

Description
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of TIF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29399.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-18303
EUVD
EUVD-2026-63452

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gnome gimp *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in GIMP's TIF file parsing. It occurs when GIMP fails to validate the length of user-supplied data before copying it to a stack buffer. Attackers can exploit this by tricking users into opening a malicious TIF file or visiting a malicious page, allowing them to execute arbitrary code on the affected system.

Detection Guidance

Detection involves checking for vulnerable GIMP versions and monitoring for suspicious TIF file processing. Inspect GIMP version with 'gimp --version' and verify if it matches patched versions. Monitor system logs for crashes during TIF file handling. Use network monitoring tools to detect unusual outbound connections after opening TIF files.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious code on your computer, potentially leading to unauthorized access, data theft, or system damage. Since user interaction is required, you are at risk if you open a malicious file or visit a compromised website.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations must address this flaw to maintain compliance and avoid potential legal penalties.

Mitigation Strategies

Immediately update GIMP to the latest patched version. Avoid opening TIF files from untrusted sources. Disable automatic TIF file association in your system settings. Implement network-level monitoring for signs of exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18303. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart