Skip to content
OpenAdvisories
High USN-6521-1 6 CVEs

gimp vulnerabilities

Published Nov 29, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that GIMP incorrectly handled certain image files. If a
user were tricked into opening a specially crafted image, an attacker could
use this issue to cause GIMP to crash, resulting in a denial of service, or
possibly execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gimp 2.10.18-1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS gimp 2.10.30-1ubuntu0.1

Vulnerabilities 6

  • High 7.8
    CVE-2023-44441 EPSS 27%

    GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gimp gimp Debian Ubuntu Alpine
  • High 7.8
    CVE-2023-44442 EPSS 61%

    GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gimp gimp Debian Ubuntu Alpine
  • High 7.8
    CVE-2023-44443 EPSS 94%

    GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

    GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target m…

    GIMP GIMP gimp gimp Debian Ubuntu Alpine
  • High 7.8
    CVE-2023-44444 EPSS 56%

    GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

    GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must vi…

    GIMP GIMP gimp gimp Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-30067

    GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a…

    gimp gimp Debian Ubuntu
  • Unscored —
    CVE-2022-32990

    An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via…

    gimp gimp Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-30067
  • report
    https://ubuntu.com/security/CVE-2022-32990
  • report
    https://ubuntu.com/security/CVE-2023-44441
  • report
    https://ubuntu.com/security/CVE-2023-44442
  • report
    https://ubuntu.com/security/CVE-2023-44443
  • report
    https://ubuntu.com/security/CVE-2023-44444