CVE-2026-18309 in GIMP

Prediction

by VulDB Data Team • 08/02/2026

A vulnerability has been found in GIMP. Affected is an unknown function of the component APNG File Parser. Such manipulation leads to integer overflow. The attack can be executed remotely.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Moderation: accepted
• Entry: VDB-385407
• CPE: ready
• CWE: CWE-190 (confirmed)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Hospital, Agriculture, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18309
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18309
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18309/