Summary
Ein Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um potenziell beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.
Product
Das "Gnu Image Manipulation Program" ist eine Open Source Software zum Bearbeiten von Bildern. Es ist auch Bestandteil vieler Linux Distributionen.
Vulnerabilities 6
-
High 7.3
Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing
A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service…
-
Medium 6.1
Gimp: gimp: denial of service via specially crafted seattle filmworks file
A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmworks` plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), le…
-
Medium 5.5
Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader
A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap bu…
-
Medium 5.5
Gimp: gimp: denial of service via crafted pvr image file
A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to…
-
Medium 5.0
Gimp: gimp: denial of service due to stack buffer overflow in tim image loader
A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service (DoS). By opening a specially crafted TIM image file, the application crashes due to an unconditional…
-
Medium 5.0
Gimp: gimp: application crashes or information disclosure via crafted icns image files
A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or inf…
Revision history
-
#5
Neue Updates von Amazon aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von Amazon aufgenommen
-
#2
Entwickler stellen Updates bereit
-
#1
Initiale Fassung
References
-
Red Hat Bugzilla vom 2026-04-15
https://bugzilla.redhat.com/show_bug.cgi?id=2458744
-
Red Hat Bugzilla vom 2026-04-15
https://bugzilla.redhat.com/show_bug.cgi?id=2458745
-
Red Hat Bugzilla vom 2026-04-15
https://bugzilla.redhat.com/show_bug.cgi?id=2458746
-
Red Hat Bugzilla vom 2026-04-15
https://bugzilla.redhat.com/show_bug.cgi?id=2458747
-
Red Hat Bugzilla vom 2026-04-15
https://bugzilla.redhat.com/show_bug.cgi?id=2458748
-
Red Hat Bugzilla vom 2026-04-15
https://bugzilla.redhat.com/show_bug.cgi?id=2458749
-
GIMP Issue 16075 vom 2026-04-16
https://gitlab.gnome.org/GNOME/gimp/-/issues/16075
-
Amazon Linux Security Advisory ALAS2GIMP-2026-015 vom 2026-05-14
https://alas.aws.amazon.com/AL2/ALAS2GIMP-2026-015.html
-
openSUSE Security Update OPENSUSE-SU-2026:21171-1 vom 2026-06-30
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5YHKRHWNE7PQCRZZSLD2TCJ546DVRCJS/
-
Amazon Linux Security Advisory ALAS2GIMP-2026-017 vom 2026-08-18
https://alas.aws.amazon.com/AL2/ALAS2GIMP-2026-017.html