Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten zu manipulieren und möglicherweise beliebigen Code auszuführen.
Product
Das "Gnu Image Manipulation Program" ist eine Open Source Software zum Bearbeiten von Bildern. Es ist auch Bestandteil vieler Linux Distributionen.
Vulnerabilities 2
-
Medium 5.5
Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk
A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CWE-121), causing the fi…
-
Medium 5.5
Gimp: gimp: remote code execution via crafted paa file
A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap-based out-of-bounds write in the decode_lzss() function of the PAA file format…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-hhpf-5jpm-6q9g vom 2026-08-02
https://github.com/advisories/GHSA-hhpf-5jpm-6q9g
-
GitHub Security Advisory GHSA-QV8F-FVHH-GFQP vom 2026-08-02
https://github.com/advisories/GHSA-QV8F-FVHH-GFQP