Skip to content
OpenAdvisories
High DLA-4431-1 3 CVEs

gimp - security update

Published Jan 2, 2026 · Updated Jan 2, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 gimp 2.10.22-4+deb11u5

Vulnerabilities 3

  • High 7.8

    GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability

    GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target m…

  • High 7.8

    GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

  • Unscored —

    GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a…