CVE-2026-40919

CVE-2026-40919 is a buffer overflow vulnerability in GIMP's file-seattle-filmworks plugin that can be triggered when users open specially crafted Seattle Filmworks files. The flaw allows remote attackers to cause denial of service conditions, resulting in plugin crashes that may destabilize the GIMP application. This vulnerability affects GIMP users who work with Seattle Filmworks file formats. The vulnerability carries a CVSS 3.1 score of 6.1 (MEDIUM severity) with a local attack vector, low complexity, and no privilege requirements. While it requires user interaction to exploit, the potential impact includes integrity compromise and high availability loss through application instability. The attack is practical to execute given only local file access and user action are needed. Currently, there is no evidence of active exploitation in the wild, as the vulnerability is not listed on the Known Exploited Vulnerabilities catalog and remains inactive on threat tracking lists. The EPSS score of 0.00021 indicates this vulnerability is in the lowest percentile for exploitation probability among all CVEs. Community attention appears minimal, suggesting awareness and active exploitation remain limited at this time.