CVE-2026-3102

CVE-2026-3102 affects exiftool up to 13.49 on macOS, specifically the SetMacOSTags function in lib/Image/ExifTool/MacOS.pm within the PNG File Parser. The vulnerability arises from manipulating the DateTimeOriginal argument, enabling an OS command injection . The issue is described as exploitable...

CVE-2026-3102 exiftool PNG File MacOS.pm SetMacOSTags os command injection

A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be...

The vulnerability of the addJS() function in the jsPDF library allows a hacker to execute arbitrary code.

The vulnerability of the addJS function in the jsPDF library for creating PDF files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, provided that the user opens a specially crafted PDF file...

[SECURITY] Fedora 43 Update: python-PyMuPDF-1.27.1-2.fc43

This is PyMuPDF, a Python binding for MuPDF - a lightweight PDF and XPS viewer. MuPDF can access files in PDF, XPS, OpenXPS, epub, comic and fiction book formats, and it is known for its top performance and high rendering quality. With PyMuPDF you therefore can also access files with extensions...

[SECURITY] Fedora 43 Update: qpdfview-0.5.0-25.fc43

qpdfview is a tabbed PDF viewer. It uses the Poppler library for rendering and CUPS for printing. It provides a clear and simple graphical user interface using the Qt framewor k...

[SECURITY] Fedora 43 Update: mupdf-1.27.1-4.fc43

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

SUSE CVE-2026-2044

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

GIMP 安全漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability that stems from improper memory initialization during the parsing of PGM files, which may lead to remote code execution...

RHEL 9 : gimp (RHSA-2026:2953)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:2953 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including...

gimp: heap-based buffer overflow via specially crafted PSP file

A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer overflow due to improper input validation of the length of user-supplied data. An attacker can exploit this vulnerability by convincing a user to open a specially crafted PSP file, resulting in ...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gimp: heap-based buffer overflow via specially crafted PSP file

A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer overflow due to improper input validation of the length of user-supplied data. An attacker can exploit this vulnerability by convincing a user to open a specially crafted PSP file, resulting in ...

gimp: heap-based buffer overflow via specially crafted PSP file

A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer overflow due to improper input validation of the length of user-supplied data. An attacker can exploit this vulnerability by convincing a user to open a specially crafted PSP file, resulting in ...

gimp: heap-based buffer overflow via specially crafted PSP file

A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer overflow due to improper input validation of the length of user-supplied data. An attacker can exploit this vulnerability by convincing a user to open a specially crafted PSP file, resulting in ...

gimp security update

An update is available for gimp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GIMP GNU Image Manipulation Program is an image composition and editing...

gimp: heap-based buffer overflow via specially crafted PSP file

A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer overflow due to improper input validation of the length of user-supplied data. An attacker can exploit this vulnerability by convincing a user to open a specially crafted PSP file, resulting in ...

Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: heap-base...

CLEANSTART-2026-KK07808 issue has been found in third-party PNM decoding associated with libpng 1

Security vulnerability affects the libpng package. An issue has been found in third-party PNM decoding associated with libpng 1...

Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : libpng vulnerability (USN-8039-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8039-1 advisory. It was discovered that the libpng simplified API incorrectly handled quantizing RGB images. If a user or automated system were tricked into...

USN-8039-1 libpng1.6 vulnerability

It was discovered that the libpng simplified API incorrectly handled quantizing RGB images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service...