CVE-2026-2047

Cve • February 21, 2026

Share: View original

Description. GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple GIMP Vulnerabilities Allow Remote Code Execution Two vulnerabilities in GIMP have been identified, allowing remote attackers to execute arbitrary code. CVE-2026-2047 involves a heap-based buffer overflow in ICNS file parsing, while CVE-2026-2048 is related to improper validation in XWD file parsing, requiring user interaction for exploitation. Both vulnerabilities were published on February 20, 2026. 4 sources 54

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

MITRE ATT&CK (1)

T1203 - Exploitation for Client Execution

Platforms (1)