Lucene search

K
osvGoogleOSV:RLSA-2024:0861
HistoryMar 12, 2024 - 3:42 p.m.

Important: gimp:2.8 security update

2024-03-1215:42:26
Google
osv.dev
4
gimp
security update
buffer overflow
rce
cve

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

15.8%

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

  • gimp: PSD buffer overflow RCE (CVE-2023-44442)

  • gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.