LiveThreat Vulnerability Brief — CVE-2026-2045
What It Is — GIMP (GNU Image Manipulation Program) contains an out‑of‑bounds write flaw in its XWD file parser that can be triggered by a crafted XWD image. The vulnerability permits remote code execution (RCE) when a victim opens or previews a malicious file, earning a CVSS 7.8 (High) score. Exploitability — No public exploit code has been released, but the advisory confirms a working proof‑of‑concept and that the vulnerability is exploitable with minimal user interaction.
Affected Products — GIMP (all versions prior to the February 2026 security patch).
TPRM Impact — GIMP is widely deployed across design agencies, marketing departments, and internal documentation pipelines. A compromised GIMP installation can serve as a foothold for attackers to move laterally within an organization’s network, potentially exposing downstream suppliers and partners that rely on shared image assets.
Recommended Actions —
- Deploy the GIMP update released on 2026‑02‑19 (commit 68b27dfb…).
- Block or sandbox XWD files on email gateways and web gateways pending remediation.
- Conduct a rapid inventory of all endpoints running GIMP and verify patch status.
- Monitor process creation logs for unexpected GIMP executions or child processes.
- Communicate the risk to third‑party vendors that exchange image assets with your organization.