GHSA-h6qg-qj72-qh79MediumCVSS 5.5

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation...

Published
October 9, 2026
Last Modified
October 9, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and crash the GIMP application.

🔗 References (4)