LiveThreat Vulnerability Brief — CVE‑2026‑2044 (GIMP PGM Parsing RCE)
What It Is — A heap‑memory uninitialized read in GIMP’s PGM image parser can be leveraged to execute arbitrary code in the context of the running GIMP process. Exploitability — An attacker must convince a user to open a crafted PGM file or visit a malicious web page that triggers the file download; no public exploit or malware campaign has been observed to date. CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) – High severity. Affected Products — All GIMP releases prior to the security‑update released in February 2026 (2.10.34). TPRM Impact — Organizations that embed GIMP in SaaS platforms, internal tooling, or rely on it for content‑creation workflows face a direct compromise of the host system and a downstream supply‑chain risk if the compromised host processes further assets for third‑party customers. Recommended Actions — Deploy the GIMP security update immediately, inventory any third‑party services that use GIMP, block or sanitize PGM files from untrusted sources, and monitor for anomalous GIMP process activity. Source: Zero Day Initiative advisory