CVE-2026-108093

A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and crash the GIMP application.

• CWE-476

• https://access.redhat.com/security/cve/CVE-2026-108093
• https://bugzilla.redhat.com/show_bug.cgi?id=2548607

Published

Oct 9, 2026

Last Modified

Oct 14, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-108086** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recu…
• CVE-2026-108087** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of s…
• CVE-2026-108088** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sens…
• CVE-2026-108089** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system…7.5
• CVE-2026-10809A security flaw has been discovered in itsourcecode Fees Man…6.3
• CVE-2026-108092The Blog2Social – Social Media Auto Post & Scheduler plugin …4.3
• CVE-2026-108094A use-after-free flaw was found in mutter in the Wayland col…7.8
• CVE-2026-108096Improper authorization in the query resolvers generated by @…6.5
• CVE-2026-1081The Set Bulk Post Categories plugin for WordPress is vulnera…4.3
• CVE-2026-10810A weakness has been identified in itsourcecode Fees Manageme…4.3
• CVE-2026-108100HortusFox (hortusfox-web) before 6.2 contains an SQL injecti…6.5
• CVE-2026-108101HortusFox (hortusfox-web) through 6.3 contains an unrestrict…7.5