Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp | 2:3.0.4-8.el9_9.5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-debuginfo | 2:3.0.4-8.el9_9.5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-debugsource | 2:3.0.4-8.el9_9.5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-devel-tools-debuginfo | 2:3.0.4-8.el9_9.5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-libs | 2:3.0.4-8.el9_9.5 |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | gimp-libs-debuginfo | 2:3.0.4-8.el9_9.5 |
Vulnerabilities 5
-
High 7.8
Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file
A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small fo…
-
High 7.8
Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)
A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in th…
-
High 7.8
Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels
A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a c…
-
High 7.8
Gimp: gimp: use-after-free in xcf loader via prop_selected_path
A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.
-
High 7.1
Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing
A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2546654
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2555574
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2555588
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2555730
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2555748
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_98495.json
-
report
https://access.redhat.com/security/cve/CVE-2026-106062
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-106062
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-106062
-
report
https://access.redhat.com/security/cve/CVE-2026-112257
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-112257
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-112257
-
report
https://access.redhat.com/security/cve/CVE-2026-112258
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-112258
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-112258
-
report
https://access.redhat.com/security/cve/CVE-2026-112260
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-112260
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-112260
-
report
https://access.redhat.com/security/cve/CVE-2026-112261
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-112261
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-112261