Is CVE-2026-112258 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-112258?

CVE-2026-112258 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-112258

Description

A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.