Security update for gimp
Description
This security update for GIMP addresses two vulnerabilities: a one-byte out-of-bounds heap read in the uncompressed DDS loader (CVE-2026-96546) and an out-of-bounds write in the GIMPressionist plugin via a crafted preset file (CVE-2026-97185). Both issues could potentially lead to memory corruption. The vulnerabilities have been assigned a low severity level. No specific affected versions or patch details are provided in the available data.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Two vulnerabilities in GIMP are fixed by this update: CVE-2026-96546 involves a one-byte out-of-bounds heap read in the uncompressed DDS loader, and CVE-2026-97185 involves an out-of-bounds write in the GIMPressionist plugin triggered by a crafted preset file. These vulnerabilities could cause memory corruption but are rated with low severity. No CVSS score is provided, and no detailed patch or affected version information is available.
Potential Impact
The vulnerabilities could lead to memory corruption through out-of-bounds read and write operations in specific GIMP components. The severity is assessed as low, indicating limited impact or exploitability based on the available information. There are no known exploits in the wild.
Mitigation Recommendations
A security update for GIMP has been released to fix these issues. Users should apply the update as provided by their vendor or distribution. Patch status is not explicitly confirmed in the data; therefore, users should consult the vendor advisory or SUSE Product Security Team for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:22025-1
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-97185"]
- State
- PUBLISHED
Threat ID: 6ac80fb02cdf04f65639a740
Added to database: 10/08/2026, 21:48:32 UTC
Last enriched: 10/08/2026, 22:09:24 UTC
Last updated: 10/08/2026, 23:08:24 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.