← CVE Intelligence

CVE-2026-108093

Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading PUBLISHED

Description (CNA)

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and crash the GIMP application.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.