Multiple GIMP Vulnerabilities Allow Remote Code Execution

Multiple GIMP Vulnerabilities Allow Remote Code Execution

First seen 21 Feb 2026, 03:20 UTC •TenableCveHeise.De •84% similarity •53.7

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in GIMP have been identified, allowing remote attackers to execute arbitrary code. CVE-2026-2047 involves a heap-based buffer overflow in ICNS file parsing, while CVE-2026-2048 is related to improper validation in XWD file parsing, requiring user interaction for exploitation. Both vulnerabilities were published on February 20, 2026.

ThreatCluster AI How this analysis works

Timeline

2026-02-20
CVE-2026-2047 published
2026-02-20
CVE-2026-2048 published
2026-02-21
Article published detailing vulnerabilities

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

GIMP