Skip to content
OpenAdvisories
High DSA-6156-1 4 CVEs

gimp - security update

Published Mar 3, 2026 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 12 gimp 2.10.34-1+deb12u9
Debian · 13 gimp 3.0.4-3+deb13u7

Vulnerabilities 4

  • High 7.8

    GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

  • High 7.8

    GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability

    GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targ…

  • High 7.8

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targe…

  • High 7.8

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the targe…