Summary
Ein lokaler Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um möglicherweise den Speicher zu beschädigen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.
Product
Das "Gnu Image Manipulation Program" ist eine Open Source Software zum Bearbeiten von Bildern. Es ist auch Bestandteil vieler Linux Distributionen.
Vulnerabilities 4
-
Medium 6.3
Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions
A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL write…
-
Medium 6.3
Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions
A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arithmetic while subsequent GEGL operations use the full extent, after integer over…
-
Medium 6.3
Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions
A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following…
-
Medium 6.3
Gimp: gimp: heap buffer overflow in hot color filter on oversized image
A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width * height (and related) arithmetic while the filter’s pixel access path uses the true image size, after…
Revision history
-
#1
Initiale Fassung
References
-
Red Hat Bugtracker 2547446 vom 2026-10-07
https://bugzilla.redhat.com/show_bug.cgi?id=2547446
-
Red Hat Bugtracker 2547456 vom 2026-10-07
https://bugzilla.redhat.com/show_bug.cgi?id=2547456
-
Red Hat Bugtracker 2547459 vom 2026-10-07
https://bugzilla.redhat.com/show_bug.cgi?id=2547459
-
Red Hat Bugtracker 2547461 vom 2026-10-07
https://bugzilla.redhat.com/show_bug.cgi?id=2547461
-
EU Vulnerability Database vom 2026-10-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-94364
-
EU Vulnerability Database vom 2026-10-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-94486
-
EU Vulnerability Database vom 2026-10-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-94528
-
EU Vulnerability Database vom 2026-10-07
https://euvd.enisa.europa.eu/enisa/EUVD-2026-94529