CVE-2026-4153

Radar advisories

• 2026-09-09 ZDI ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability An integer overflow in GIMP’s PSP file parser can lead to remote code execution.
• 2026-03-19 ZDI ZDI-26-220: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability The vulnerability is triggered by parsing a malicious PSP file, requiring user interaction to open the file or visit a malicious page.

References

• NVD ↗
• CVE.org ↗
• Zero Day Initiative ↗