A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.
| CVE | CVE-2026-112258 |
|---|---|
| Severidad | HIGH |
| CVSS | 7.8 / 10 |
| EPSS | 0.1% en 30 días (percentil 3) |
| CWE | CWE-416 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |