Rocky Linux 8 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (crlsa-2026_17533)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202617533 advisory. gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image CVE-2026-4887 gimp: GIMP: Remote Code Execution via XPM File Parsing...

Rocky Linux 9 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-libs / etc Multiple Vulnerabilities (crlsa-2026_16484)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202616484 advisory. gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image CVE-2026-4887 gimp: GIMP: Remote Code Execution via XPM File Parsing...

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.2:CLSA-2026:1777397602)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777397602 advisory. - A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by- one error. A remote attacker coul...

EUVD-2026-88558

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-101205

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-101205 FastStone Image Viewer PCX Decoder out-of-bounds

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-101205 FastStone Image Viewer PCX Decoder out-of-bounds

A vulnerability was determined in FastStone Image Viewer up to 8.3. This impacts an unknown function of the component PCX Decoder. This manipulation causes out-of-bounds read. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2026-101205

A vulnerability exists in FastStone Image Viewer up to version 8.3 . The issue resides within an unknown function of the PCX Decoder component, where specific manipulation can trigger an out-of-bounds read . This attack can be initiated remotely . No specific remediation or exploit details are pr...

PT-2026-102390

Name of the Vulnerable Software and Affected Versions FastStone Image Viewer versions prior to 8.4 Description A remote out-of-bounds read can be triggered within the PCX Decoder component. This occurs when the software processes a specially crafted file, allowing an attacker to read memory outsi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-pillow (UTSA-2026-090118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090118 advisory. In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state-shuffle is instructed to read beyond state-buffe...

Debian dsa-6509 : gimp - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6509 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/securit...

openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:21869-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21869-1 advisory. Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations bsc1277378 -...

OPENSUSE-SU-2026:21869-1 Security update for gimp

This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-78465: 32-bit integer overflow in PCX image memory calculations can cause undersized heap allocations bsc1277378 - CVE-2026-78475: unbounded variable-length stack allocations in the PIX loader can cause stack exhaustion...

OESA-2026-3802 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

Astra Linux – Vulnerability in pillow

In Pillow before 8.1.0, PcxDecode has a buffer over-reading issue when decoding a crafted PCX file, because the user-supplied stride value is trusted for buffer calculations...

Astra Linux – Vulnerability in GhostScript

A buffer overflow vulnerability was discovered in base/gdevdevn.c:1973 within devnpcxwriterle in ghostscript. This issue may allow a local attacker to cause a denial of service by generating a malicious PDF file for a DEVN device using gs...

OESA-2026-3610 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

OESA-2026-3609 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

The vulnerability of the PCX format form file loading module in the Gimp image processing library allows a hacker to trigger a service failure.

The vulnerability of the PCX format file loading module in the Gimp image processing library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-78465

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...