Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Programmcode auszuführen, oder Informationen offenzulegen.
Product
Das "Gnu Image Manipulation Program" ist eine Open Source Software zum Bearbeiten von Bildern. Es ist auch Bestandteil vieler Linux Distributionen.
Vulnerabilities 2
-
High 7.0
Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based…
-
Medium 6.1
Gimp: gimp: paa integer overflow out-of-bounds read
A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when cal…
Revision history
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-10-18
https://github.com/advisories/GHSA-J2FP-FFQV-FQVJ
-
GitHub Advisory Database vom 2026-10-18
https://github.com/advisories/GHSA-G4V7-36Q4-HPJM
-
Proof-of-Concept für CVE-2026-62439 auf GitLab
https://gitlab.gnome.org/GNOME/gimp/-/issues/16314
-
Proof-of-Concept für CVE-2026-62438 auf GitLab
https://gitlab.gnome.org/GNOME/gimp/-/issues/16313