CVE-2026-40919
A flaw was found in GIMP.
Published Apr 15, 2026 · updated Jun 17, 2026 · gimp gimp
A flaw was found in GIMP. This vulnerability, a buffer overflow in the plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), leading to the plugin crashing and potentially impacting the stability of the GIMP application.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 15, 2026 · NIST NVD
Detected
A flaw was found in GIMP. This vulnerability, a buffer overflow in the plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), leading to the plugin crashing and potentially impacting the stability of the GIMP application.
Jun 17, 2026 · NIST NVD
Updated
A flaw was found in GIMP. This vulnerability, a buffer overflow in the plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), leading to the plugin crashing and potentially impacting the stability of the GIMP application.
Affected
- cpe gimp/gimpversion unspecified
- cpe redhat/enterprise linux6.0
- cpe redhat/enterprise linux7.0
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux9.0
Sources
- CVE.orgVulnerability recordCVE-2026-40919
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40919
A flaw was found in GIMP. This vulnerability, a buffer overflow in the plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), leading to the plugin c
nvd.nist.gov