CVE-2026-2271
CWE-190Published: March 26, 2026· Updated: Mar 30, 2026
Official Description
A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in the read_creator_block() function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory allocation without proper validation, leading to a heap overflow and an out-of-bounds write. Successful exploitation could result in an application level denial of service.
Technical Analysis
CVE-2026-2271 requires local access, meaning attackers must already have a foothold on the target system.
Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
News & Research Mentioning CVE-2026-2271
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution. The post VMware Aria Operations Vulnerability Exploited in the Wild appeared first on SecurityWeek. [xlite_meta score:50 src:SecurityWeek xlite_fp:e0a414ecaf3614fe3a82db65431ffa8dce5169a1b1de3862d464d5924393f8f2]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a recently disclosed security flaw impacting Broadcom VMware Aria Operations to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild. The high-severity vulnerability, CVE-2026-22719 (CVSS score: 8.1), has been described as a case of command injection that could allow an [xlite_meta score:59 src:The Hacker News xlite_fp:5387852e8f4225e167fcada60edfdd06b84ea1a53b680e14f893e1c38921a04f]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a VMware Aria Operations vulnerability tracked as CVE-2026-22719 to its Known Exploited Vulnerabilities catalog, flagging the flaw as exploited in attacks. [...] [xlite_meta score:58 src:BleepingComputer xlite_fp:a05134ea1aad4bfc0bb08755f33d6726ade0162352f9fb16ec1836c779accc2c]
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-21385 Qualcomm Multiple Chipsets Memory Corruption Vulnerability CVE-2026-22719 Broadcom VMware Aria Operations Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to [xlite_meta score:51 src:CISA Alerts xlite_fp:32b5bedd7e6bf39d22e9734814d8743122d8c2f91d1ce220abff4089a8d644bd]
All References (3)
Quick Facts
Related CVEs (CWE-190)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-2271 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts