Skip to content
OpenAdvisories
Medium WID-SEC-2026-3081 4 CVEs

GIMP: Mehrere Schwachstellen ermöglichen Denial of Service und die Offenlegung von Informationen

Published Aug 30, 2026 · Updated Oct 25, 2026 · Revision 6 · de-DE

Vendor: amazon Vendor: Debian Vendor: SUSE Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.

Product

Das "Gnu Image Manipulation Program" ist eine Open Source Software zum Bearbeiten von Bildern. Es ist auch Bestandteil vieler Linux Distributionen.

Vulnerabilities 4

  • Medium 6.1
    CVE-2026-82324

    Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

    A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes (nPlanes) is zero. This c…

    Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • Medium 6.1
    CVE-2026-82328

    Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count

    A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palette count) parameter. This incorrect validation leads to improper memory bounds checking, resulting i…

    Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • Medium 6.1
    CVE-2026-82330

    Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

    A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can res…

    Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • Medium 6.1
    CVE-2026-82343

    Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

    A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a hea…

    Red Hat GNOME Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu

Revision history

  1. #6

    Neue Updates von SUSE aufgenommen

  2. #5

    Neue Updates von openSUSE aufgenommen

  3. #4

    Neue Updates von Debian aufgenommen

  4. #3

    Neue Updates von openSUSE aufgenommen

  5. #2

    PoC aufgenommen

  6. #1

    Initiale Fassung

References