Lucene search
K

10 matches found

OSV
OSV
added 2025/11/25 9:10 a.m.2 views

RLSA-2025:21968 Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP DCM...

7.8CVSS7.2AI score0.00743EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/11/24 3:50 p.m.3 views

gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability

A remote code execution vulnerability exists in GIMP due to improper validation of user-supplied data during the parsing of WBMP Wireless Bitmap files. The flaw occurs because an integer overflow can happen before memory allocation, leading to a heap-based buffer overflow. An attacker can exploit...

7.8CVSS6.9AI score0.00075EPSS
Exploits0References6
Fedora
Fedora
added 2025/11/06 2:24 a.m.4 views

[SECURITY] Fedora 42 Update: qt5-qtimageformats-5.15.18-1.fc42

The core Qt Gui library by default supports reading and writing image files of the most common file formats: PNG, JPEG, BMP, GIF and a few more, ref. Reading and Writing Image Files. The Qt Image Formats add-on module provides optional support for other image file formats, including: MNG, TGA,...

7AI score
Exploits0
OSV
OSV
added 2025/10/29 8:15 p.m.1 views

CVE-2025-10923

GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

7.8CVSS7.8AI score
Exploits0References2
CVE
CVE
added 2025/10/29 7:29 p.m.24 views

CVE-2025-10923

CVE-2025-10923 : GIMP WBMP File Parsing Integer Overflow Remote Code Execution vulnerability. The flaw arises from insufficient validation during WBMP parsing, causing an overflow when allocating a buffer and enabling code execution in the current process. Exploitation requires the target to visi...

7.8CVSS7.7AI score0.00075EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2025/09/25 11:27 p.m.1 views

SUSE CVE-2025-10923

GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.00075EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/03/06 12:0 a.m.1 views

SAMSUNG Notes 安全漏洞

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which stems from a lack of proper validation of user-supplied data when parsing wbmp images, and can be...

5.5CVSS6.7AI score0.00122EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-39344

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow exists in the WBMP file parsing functionality of GIMP. This issue could allow for remote code execution. Recommendations At the moment, there is no information about a newer...

7.8CVSS8AI score0.00743EPSS
Exploits0References49
SUSE CVE
SUSE CVE
added 2023/02/15 6:12 a.m.2 views

SUSE CVE-2007-1001

Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...

6.8CVSS8.1AI score0.11588EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2007/04/20 9:47 a.m.2 views

security flaw

Multiple integer overflows in the 1 createwbmp and 2 readwbmp functions in wbmp.c in the GD library libgd in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap WBMP images with large width or height values...

6.8CVSS6.2AI score0.11588EPSS
Exploits1References4
Rows per page
Query Builder