Threats tagged 'ghsa-qq8p-jmjc-fwxx'

A use-after-free vulnerability exists in GIMP's XCF loader due to a dangling pointer in the linked-channels list when a linked channel is destroyed via a selection property. Opening a crafted XCF file can trigger this flaw, potentially causing a crash or arbitrary code execution in the main GIMP process. This issue is tracked as CVE-2026-112258 and has a high severity rating with a CVSS score of 7.8.