Description
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gimp | 2.2.16-1 | — |
| Debian 13 | gimp | 2.2.16-1 | — |
| Debian 12 | gimp | 2.2.16-1 | — |
| Debian 4.0 | gimp | 2.2.13-1etch4 | DSA-1335-1 |
| Debian 3.1 | gimp | 2.2.6-1sarge4 | DSA-1335-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | gimp +2 | 2:2.2.13-2.0.7.el5 | RHSA-2007:0513 |
| RHEL 4 | gimp +1 | 1:2.0.5-7.0.7.el4 | RHSA-2007:0513 |
| RHEL 3 | gimp +2 | 1:1.2.3-20.9.el3 | RHSA-2007:0513 |
| RHEL 2 | gimp +2 | 1:1.2.1-7.8.el2_1 | RHSA-2007:0513 |
Advisories 2
- RHSA-2007:0513 Red Hat Security Advisory: gimp security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1335-1 gimp Debian Security (DSA / DLA) · Mar 9, 2026
References
- 26132 third-party-advisory
- ADV-2007-2471 vdb-entry
- 20070801 FLEA-2007-0038-1 gimp mailing-list
- gimp-plugins-code-execution(35308) vdb-entry
- 42139 vdb-entry
- GLSA-200707-09 vendor-advisory
- oval:org.mitre.oval:def:10842 vdb-entry signature
- 26240 third-party-advisory
- 26575 third-party-advisory
- 42140 vdb-entry
- USN-494-1 vendor-advisory
- http://bugzilla.gnome.org/show_bug.cgi?id=451379
- http://developer.gimp.org/NEWS-2.2
- RHSA-2007:0513 vendor-advisory
- 20070709 Multiple Vendor GIMP Multiple Integer Overflow Vulnerabilities third-party-advisory
- 42143 vdb-entry
- 42145 vdb-entry
- 24835 vdb-entry
- 26215 third-party-advisory
- 1018349 vdb-entry
- 42144 vdb-entry
- MDKSA-2007:170 vendor-advisory
- 42141 vdb-entry
- DSA-1335 vendor-advisory
- 26939 third-party-advisory
- 42142 vdb-entry
- http://issues.foresightlinux.org/browse/FL-457