Lucene search
K

167 matches found

Cvelist
Cvelist
added 2026/03/26 8:0 p.m.17 views

CVE-2026-2272 Gimp: gimp: memory corruption due to integer overflow in ico file handling

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the icoreadinfo and icoreadicon functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized imag...

4.3CVSS0.00033EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2026/03/23 3:26 p.m.3 views

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.8CVSS5.9AI score0.00056EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2026/03/23 3:14 p.m.2 views

gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of ICO files. A remote attacker can exploit this by convincing a user to open a malicious file or visit a malicious web page, leading to arbitrary code execution. The issue is due to a lack of...

7.8CVSS6.2AI score0.00043EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/03/23 12:0 a.m.2 views

RHEL 8 : gimp:2.8 (RHSA-2026:5435)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5435 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

7.8CVSS7.2AI score0.00056EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2026/03/23 12:0 a.m.3 views

RHEL 8 : gimp:2.8 (RHSA-2026:5436)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5436 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

7.8CVSS5.9AI score0.00056EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2026/03/20 12:0 a.m.3 views

AlmaLinux 8 : gimp:2.8 (ALSA-2026:5113)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:5113 advisory. gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing CVE-2026-2044 gimp: GIMP: Remote Code Execution via out-of-bounds write in...

7.8CVSS7.3AI score0.00056EPSS
Exploits0References6
Amazon
Amazon
added 2026/03/19 12:0 a.m.7 views

Important: gimp

Issue Overview: GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.6AI score0.00056EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/03/19 12:0 a.m.4 views

RockyLinux 8 : gimp:2.8 (RLSA-2026:5113)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:5113 advisory. gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing CVE-2026-2044 gimp: GIMP: Remote Code Execution via out-of-bounds write in...

7.8CVSS7.3AI score0.00056EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2026/03/15 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-006173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006173 advisory. GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

8.8CVSS6.3AI score0.01642EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2026/03/11 12:0 a.m.2 views

Ubuntu: Security Advisory (USN-8082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS5.8AI score0.01642EPSS
Exploits0References2
OSV
OSV
added 2026/02/20 10:16 p.m.2 views

DEBIAN-CVE-2026-0797

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS7.8AI score0.00043EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 10:16 p.m.3 views

CVE-2026-0797

GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

7.8CVSS0.00043EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.4 views

GIMP 安全漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability that stems from the improper validation of data length during the parsing of ICO files. This issue occurs when data provided by users is copied into a heap-based buffer without proper validati...

7.8CVSS7.6AI score0.00043EPSS
Exploits0References2
SUSE Linux
SUSE Linux
added 2026/02/11 9:45 a.m.5 views

Security update for gimp

This update for gimp fixes the following issues: CVE-2026-0797: Fixed a heap-based buffer overflow in the parsing of ICO files. bsc1257549 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...

8.5CVSS5.8AI score0.00043EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-2272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the icoreadinfo and icoreadicon functions...

6.5CVSS7.3AI score0.00033EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-16624

Malware in sbrugna...

5.5CVSS5.5AI score0.00195EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-16626

Malware in sbrugna...

5.5CVSS5.5AI score0.00165EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-27230

Malware in sbrugna...

9.8CVSS9.3AI score0.01431EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-15373

Malware in sbrugna...

5.5CVSS6.4AI score0.00324EPSS
Exploits1References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-7275

Malware in sbrugna...

7.5CVSS7.6AI score0.01773EPSS
Exploits1References13
Rows per page
Query Builder