Vulnerabilities

TI-2026-78891 CVE-2026-92183 · GHSA-x9xp-qfj5-72gg

Stack buffer overflow in GIMP APNG parsing enables code execution

LOW 37

GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00672 Published 2026-10-21 No fix listed CWE-121

TI-2026-56782 CVE-2026-82343 · GHSA-cj7r-2p4g-x2hx

Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

LOW 26

A flaw was found in the file-psd plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00183 Published 2026-08-28 Fix deferred CWE-120

TI-2026-56778 CVE-2026-82330 · GHSA-jf24-j29f-vrgj

Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

MEDIUM 60

A flaw was found in the file-pvr plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00264 Published 2026-08-28 No fix listed CWE-125

TI-2026-56776 CVE-2026-82328 · GHSA-q72j-h9qm-329m

Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count

MEDIUM 60

A flaw was found in the file-ico plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00184 Published 2026-08-28 Fix deferred CWE-125

TI-2026-56772 CVE-2026-82324 · GHSA-g4vr-wmrr-2qfv

Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

LOW 26

A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00185 Published 2026-08-28 Fix deferred CWE-125

TI-2026-55275 CVE-2026-79902 · GHSA-7m98-q7f5-f6rr

Gimp: stack vla size underflow denial of service in seattle

MEDIUM 58

A flaw was found in the Seattle FilmWorks plugin in GIMP.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00266 Published 2026-08-26 No fix listed CWE-190

TI-2026-55366 CVE-2026-80101 · GHSA-r338-8qhf-wvrr

Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation

MEDIUM 54

A flaw was found in the file-xwd plugin in GIMP.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00234 Published 2026-08-25 Fix deferred CWE-125

TI-2026-54564 CVE-2026-78475 · GHSA-gqxg-r7gf-m7m7

Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

LOW 27

A flaw was found in the file-pix (ESM) plugin in GIMP.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00264 Published 2026-08-24 Fix deferred CWE-125

TI-2026-54560 CVE-2026-78465 · GHSA-944m-78f8-q7cr

Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

HIGH 66

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00281 Published 2026-08-24 Will not fix CWE-190

TI-2026-15062 CVE-2026-18309 · GHSA-vrp8-qfgv-rprj

Integer overflow in GIMP

LOW 36

GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00469 Published 2026-08-20 Will not fix CWE-190

TI-2026-15061 CVE-2026-18308 · GHSA-m928-p45f-cxg6

Integer overflow in GIMP

LOW 36

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00339 Published 2026-08-20 Partial fix CWE-190

TI-2026-15060 CVE-2026-18307 · GHSA-3pr5-5prq-x75c

Heap-based buffer overflow in GIMP

LOW 36

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00423 Published 2026-08-20 Partial fix CWE-122

TI-2026-15059 CVE-2026-18306 · GHSA-7pm3-57j9-653g

Integer overflow in GIMP

LOW 36

GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00339 Published 2026-08-20 Partial fix CWE-190

TI-2026-15058 CVE-2026-18305 · GHSA-7qjq-qhff-chm9

Integer overflow in GIMP

LOW 36

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00359 Published 2026-08-20 Partial fix CWE-190

TI-2026-15057 CVE-2026-18304 · GHSA-2pp7-5fqx-5xcq

Integer overflow in GIMP

LOW 36

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00359 Published 2026-08-20 Partial fix CWE-190

TI-2026-15056 CVE-2026-18303 · GHSA-5g2q-9q4q-p55m

Stack-based buffer overflow in GIMP

LOW 36

GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00389 Published 2026-08-20 Partial fix CWE-121

TI-2026-15055 CVE-2026-18302 · GHSA-5gmv-r46m-x6rr

Heap-based buffer overflow in GIMP

LOW 36

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00389 Published 2026-08-20 Partial fix CWE-122

TI-2026-15054 CVE-2026-18301 · GHSA-282j-q335-6rxf

Integer overflow in GIMP

LOW 36

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00339 Published 2026-08-20 Partial fix CWE-190

TI-2026-15053 CVE-2026-18300 · GHSA-28mq-m8mv-9qrq

Integer overflow in GIMP

LOW 36

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00332 Published 2026-08-20 Partial fix CWE-190

TI-2026-42271 CVE-2026-59091 · GHSA-47q2-mm4c-pmpc

Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file

LOW 36

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00405 Published 2026-08-10 Will not fix CWE-787

TI-2026-42270 CVE-2026-59090 · GHSA-gfh5-q868-q4pw

Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow

HIGH 76

A flaw was found in GIMP's PSD file format plugin.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0076 Published 2026-08-10 Partial fix · 2:3.0.4-4.el9_8.10, 2:2.99.8-4.el9_2.7 +2 CWE-191

TI-2026-42268 CVE-2026-59088 · GHSA-rm5p-w89v-vxg2

Gimp: gimp: denial of service via signed integer overflow in fli file processing

LOW 25

A flaw was found in GIMP.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00329 Published 2026-08-10 Fix deferred CWE-190

TI-2026-42267 CVE-2026-59087 · GHSA-hh4m-xc2h-qj94

Out-of-bounds write in gimp

LOW 37

A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00473 Published 2026-08-10 Will not fix CWE-787

TI-2026-05873 CVE-2026-6695 · GHSA-hhpf-5jpm-6q9g

Gimp: gimp: remote code execution via crafted paa file

LOW 25

A flaw was found in GIMP.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00342 Published 2026-08-03 Fix deferred CWE-805

TI-2026-47407 CVE-2026-66759 · GHSA-2gmh-5658-rrq3

Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images

MEDIUM 64

A flaw was found in the file-icns plugin in GIMP.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00305 Published 2026-07-27 Fixed in 2:3.0.4-4.el9_8.9 CWE-125

Vulnerabilities

Filters