gimp: GIMP: Arbitrary code execution via crafted TIF file parsing

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memor...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

Important: Red Hat Security Advisory: gimp security update

An update for gimp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

SUSE SLED15: gimp / gimp-devel / gimp-lang / gimp-plugin-aa / libgimp-2_0-0 / etc (SUSE-SU-2026:4409-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4409-1 advisory. - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing...

Security update for gimp

This update for gimp fixes the following issues: CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. CVE-2026-18304: TIF File Parsing...

SUSE-SU-2026:4409-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-18301: Vulnerability Report at readchanneldata bsc1276230. - CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow bsc1276231. - CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow bsc1276232. - CVE-2026-18304: TIF File...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788777401)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788777401 advisory. - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

Rocky Linux 8 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (crlsa-2026_62507)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662507 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on...

Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788777401)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788777401 advisory. - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

gimp: GIMP: Arbitrary code execution via crafted TIF file parsing

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memor...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1788774195)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788774195 advisory. - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

OPENSUSE-SU-2026:21959-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability bsc1276233 - CVE-2026-18301: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability bsc1276230 - CVE-2026-18307: GIMP...

Astra Linux – Vulnerability in TIF format

The "Divide By Zero" error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service attack through a crafted TIF file. For users who compile libtiff from source code, the fix is available in the commit f3a5e010...