Is CVE-2026-108093 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-108093?

CVE-2026-108093 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-108093

Description

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and crash the GIMP application.