Red Hat Security Advisory

RHSA-2026:17533

gimp:2.8 security update

Released 2026-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) gimp-2:2.8.22-26.module+el8.10.0+24277+6acc3952.6.aarch64::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+24277+6acc3952.6.ppc64le::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+24277+6acc3952.6.s390x::gimp:2.8 +47

Fixes 4 records

TI-2026-03602 CVE-2026-4154 · GHSA-7cp2-q9fg-jpv9

Integer overflow in GIMP

LOW 37

GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00596 Published 2026-04-11 Partial fix CWE-190

TI-2026-03601 CVE-2026-4153 · GHSA-rr9p-8245-3f99

Heap-based buffer overflow in GIMP

LOW 37

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00638 Published 2026-04-11 Partial fix CWE-122

TI-2026-03598 CVE-2026-4150 · GHSA-wgjm-63ch-mwj3

Integer overflow in GIMP

LOW 37

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0074 Published 2026-04-11 Partial fix CWE-190

TI-2026-04259 CVE-2026-4887 · GHSA-wmqx-rmqw-vxp8

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

LOW 32

A flaw was found in GIMP.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00645 Published 2026-03-26 Partial fix · 2:2.8.22-1.el7_9.6, 8100020260512115927.4c9c024f +9 CWE-193