< Back

CVE-2026-112261

Updated on 19 Oct 2026

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.

Details

Affected product:
AlmaLinux 9.2 ESU , TuxCare 9.6 ESU , TuxCare 9.8 ESU
Affected packages:
gimp @ 2.99.8 (+2 more)