Back Cve

CVE-2026-2045

Cve • February 21, 2026

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple GIMP Vulnerabilities Allow Remote Code Execution Two vulnerabilities in GIMP have been identified, allowing remote attackers to execute arbitrary code. CVE-2026-2047 involves a heap-based buffer overflow in ICNS file parsing, while CVE-2026-2048 is related to improper validation in XWD file parsing, requiring user interaction for exploitation. Both vulnerabilities were published on February 20, 2026. 4 sources 54

Extracted Entities

CVE-2026-2045

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)