Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
8118 articles · 242418 vulns · 37/41 feeds (7d)
← Back to list
7.1
CVE-2026-112260EXPLOITED
red hat · red hat enterprise linux

Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing

Description

A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.

Affected Products

VendorProductVersions
red hatred hat enterprise linux—

References

  • https://access.redhat.com/security/cve/CVE-2026-112260(vdb-entry, x_refsource_REDHAT)
  • https://bugzilla.redhat.com/show_bug.cgi?id=2555730(issue-tracking, x_refsource_REDHAT)

Related News (1 articles)

Tier C
VulDB3h ago
CVE-2026-112260 | GIMP XCF out-of-bounds
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.1 NONE
CISA KEV❌ No
Actively exploited✅ Yes
CWECWE-125
PublishedOct 19, 2026
Last enriched1h ago
Tags
remote code executionfile manipulationdenial of servicemultiple vulnerabilities
Trending Score47
Source articles1
Independent1
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-112210EXP
Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service
Trending: 53
NONECVE-2026-112214EXP
Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser
Trending: 49
NONECVE-2026-89096EXP
Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd
Trending: 49
NONECVE-2026-62439
Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
Trending: 43
NONECVE-2026-16460EXP
Bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization
Trending: 41

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 19, 2026
Discovered by ZDM
Oct 19, 2026
Actively Exploited
Oct 19, 2026
Exploit Available
Oct 19, 2026