Skip to content
OpenAdvisories
High USN-7209-1 1 CVE

gimp-dds vulnerabilities

Published Jan 16, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Jacob Boerema discovered that the GIMP DDS Plugin incorrectly
processed DDS files due to a memory issue. An attacker could
exploit this through a specifically crafted DDS file to cause
GIMP to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS gimp-dds 3.0.1-1+deb10u1build0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS gimp-dds 3.0.1-1+deb10u1build0.22.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS gimp-dds 3.0.1-1+deb10u1build0.16.04.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS gimp-dds 3.0.1-1+deb10u1build0.18.04.1~esm1

Vulnerabilities 1

  • High 7.8
    CVE-2023-44441 EPSS 27%

    GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gimp gimp Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-44441