Important: gimp

Issue Overview: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CLSA-2026-1777397602 gimp: Fix of CVE-2026-4887

CVE-2026-4887 fix heap buffer over-read in PCX file loader by adding bpp validation, tolerating off-by-one bytesperline values, and allocating one extra byte for line buffers...

OESA-2026-2001 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

OESA-2026-2000 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

OESA-2026-2002 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

ROS-20260424-73-0005

Vulnerability in gimp related to writing outside buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

ROS-20260424-73-0003

Vulnerability in gimp related to the use of an uninitialized resource. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

ROS-20260424-73-0001

Vulnerability in gimp related to buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

ROS-20260424-73-0004

Vulnerability in gimp related to writing outside buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

[SECURITY] [DLA 4547-1] gimp security updat

------------------------------------------------------------------------- Debian LTS Advisory DLA-4547-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 23, 2026 https://wiki.debian.org/LTS -...

Debian dla-4547 : gimp - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4547 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4547-1 [email protected]...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-014286)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014286 advisory. GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-014295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014295 advisory. GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-014294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014294 advisory. GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte...

CLSA-2026-1776848113 gimp: Fix of 2 CVEs

CVE-2026-2239: fix heap-buffer-overflow in freadpascalstring when processing PSD files and a follow-up NULL pointer dereference in loadresource1006 alpha names handling - CVE-2026-2272: fix integer overflow in ICO file loading...

The vulnerability of the icns_slurp() function in the Gimp image processing library allows a hacker to cause application failures or expose confidential information.

The vulnerability of the icnsslurp function in the Gimp image processing library is related to reading data outside of the allowed range in memory. Exploiting this vulnerability could allow an attacker to cause the application to crash or expose confidential information...

The vulnerability of the Gimp image processing library, related to incorrect calculations of the buffer size allocated, allows a hacker to cause a service failure.

The vulnerability of the Gimp image processing library is related to incorrect calculations of the buffer size allocated for processing images. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the TIM image loader in the Gimp image processing library allows a hacker to induce a service failure.

The vulnerability of the TIM image loader in the Gimp image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the file-seattle-filmworks plugin for the Gimp image processing library allows a hacker to induce a service failure.

The vulnerability of the file-seattle-filmworks plugin for the Gimp image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Gimp image processing library, related to integer overflow, allows attackers to execute arbitrary code or cause system failures.

The vulnerability of the Gimp image processing library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...