← CVE Intelligence

CVE-2026-112261

Gimp: gimp: use-after-free in xcf loader via prop_selected_path PUBLISHED

Description (CNA)

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6unaffected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-416

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.