UBUNTU-CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

Buffer overflow

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to a crafted-XCF buffer overflow that can exhaust memory or crash the program. Debian LTS DLA-4431-1 fixes CVE-2022-30067 in gimp 2.10.22-4+deb11u5; multiple advisories corroborate the issue and propose upgrading. If exploiting vectors are not detailed in t...

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP versions 2.10.30 and 2.99.10 that stems from vulnerability to buffer overflows. An attacker exploiting this vulnerability could cause an out of memory or program crash via a crafted XCF file...

CVE-2022-30067

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash...

PT-2022-6739

Name of the Vulnerable Software and Affected Versions GIMP versions 2.10.30 through 2.10.30 GIMP version 2.99.10 Description The issue is related to a buffer overflow vulnerability. It can be exploited by a remote attacker using a specially crafted XCF file, which causes the program to allocate a...

Mageia: Security Advisory (MGASA-2017-0397)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0364)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

Design/Logic Flaw

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

CVE-2021-33489

OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file...

UBUNTU-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

Arbitrary Code Execution

An exploitable integer overflow vulnerability exists in the flattenIncrementally function in the xcf2png and xcf2pnm binaries of xcftools 1.0.7. An integer overflow can occur while calculating the row's allocation size, that could be exploited to corrupt memory and eventually execute arbitrary...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way ImageMagick parsed XCF files. If a specially-crafted XCF image was opened, ImageMagick could be made to overwrite heap memory beyond the bounds of its allocate...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists if a victim opened a specially-crafted DCM, DIB, XBM, XCF or XWD file, an attacker could potentially execute arbitrary code with the privileges of the user running ImageMagick...

SUSE SLED12 Security Update : gimp (SUSE-SU-2020:0601-1)

This update for gimp fixes the following issues : Fix for crashing due to segmentation fault caused by importing ghostscript files. bsc1161998 Security issues fixed: CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import bsc1073625 CVE-2017-17786: Fixed an out-of-bounds read in TGA...

Huawei EulerOS: Security Advisory for gimp, gimp-help (EulerOS-SA-2016-1075)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...