GIMP Vulnerability: Denial of Service and Information Disclosure

CERT-Bund has released Security Advisory WID-SEC-2026-0882 concerning a vulnerability in the GIMP (GNU Image Manipulation Program) software. The vulnerability, rated with a CVSS Base Score of 4.4 (medium), allows remote, anonymous attackers to exploit a flaw to perform a denial of service attack or disclose information. The advisory applies to GIMP versions on Linux, other UNIX systems, and Windows, noting that GIMP is a component of many Linux distributions.

While no specific mitigation is provided in this advisory, users of GIMP should be aware of the potential risks. The advisory indicates that the vulnerability is exploitable remotely but does not specify a compliance deadline or direct actions beyond awareness. Further information and potential patches will likely be released as the situation develops, and users should monitor for updates from CERT-Bund and GIMP developers.