Search: CVE-2026-18306

CVE-2026-18306 is a high-severity integer overflow vulnerability in GIMP version 3.2.2 affecting the parsing of SGI image files. This flaw allows remote attackers to execute arbitrary code by tricking a user into opening a malicious SGI file or visiting a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data leading to an integer overflow before memory write operations.