Red Hat Security Advisory

RHSA-2026:50817

gimp security update

Released 2026-08-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) gimp-2:3.0.4-4.el9_8.9, gimp-libs-2:3.0.4-4.el9_8.9

Fixes 3 records

TI-2026-47407 CVE-2026-66759 · GHSA-2gmh-5658-rrq3

Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images

MEDIUM 64

A flaw was found in the file-icns plugin in GIMP.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00305 Published 2026-07-27 Fixed in 2:3.0.4-4.el9_8.9 CWE-125

TI-2026-47406 CVE-2026-66758 · GHSA-p2xc-g3qc-p2mq

Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images

LOW 36

A flaw was found in the file-fits plugin in GIMP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00296 Published 2026-07-27 Partial fix · 8100020260824165450.4c9c024f, 2:3.0.4-4.el9_8.9 +3 CWE-190

TI-2026-30495 CVE-2026-42169 · GHSA-xq2c-w9r3-rwr6

Gimp: gimp apng loader heap-buffer-overflow when fctl width exceeds ihdr width (file-png.c)

LOW 35

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00133 Published 2026-08-04 Fixed in 2:3.0.4-4.el9_8.9, 2:2.99.8-4.el9_2.7 +2 CWE-131