CVE-2026-112259

CVSS 5.5 (medium) · published 2026-10-19

A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.

Weakness: CWE-476

Source: NVD CVE-2026-112259

References

• https://access.redhat.com/security/cve/CVE-2026-112259
• https://bugzilla.redhat.com/show_bug.cgi?id=2555595

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.