7 matches found
CLSA-2026-1785922090 gimp: Fix of 2 CVEs
CVE-2026-2271: validate the Creator-block field length in the PSP loader; readcreatorblock used a 32-bit length straight from the file for allocation, so a length of 0xFFFFFFFF made gmalloclen+1 wrap to gmalloc0 and the following read overflowed the heap...
Astra Linux – Vulnerability in GIMP
A flaw was discovered in GIMP’s PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in the readcreatorblock function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory...
CVE-2026-2271: Integer Overflow or Wraparound
A flaw was found in GIMP's PSP Paint Shop Pro file parser. A remote attacker could exploit an integer overflow vulnerability in the readcreatorblock function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory...
GIMP read_creator_block Heap Buffer Overflow DoS
The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...
CVE-2017-17787
In GIMP 2.8.22, there is a heap-based buffer over-read in readcreatorblock in plug-ins/common/file-psp.c...
