Threats tagged 'ghsa-c76x-qr78-64hw'

A use-after-free vulnerability exists in GIMP's XCF loader triggered by opening a crafted XCF file that selects a path but fails to load it. This flaw can cause the main process to crash and may lead to arbitrary code execution. The vulnerability is tracked as CVE-2026-112261 and has a high severity rating with a CVSS score of 7.8. Red Hat has issued a security advisory providing patches for this and related GIMP vulnerabilities in Red Hat Enterprise Linux 9.8 Extended Update Support.