Threat Intelligence Database

A stack buffer overflow vulnerability exists in GIMP's PNM file format parser due to an off-by-one error in the pnmscanner_gettoken() function. This flaw can cause memory corruption when processing specially crafted PNM files, potentially leading to denial of service or arbitrary code execution. Red Hat has issued a security update addressing this issue in GIMP for Red Hat Enterprise Linux 9.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887) * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154) * gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow (CVE-2026-4151) * gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152) * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150) * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple remote code execution vulnerabilities have been identified in GIMP (GNU Image Manipulation Program) related to parsing of PGM, XWD, and ICO image files. These vulnerabilities could allow an attacker to execute arbitrary code via crafted image files. Red Hat has issued a security update for GIMP in Red Hat Enterprise Linux 9.4 Extended Update Support to address these issues.

Multiple remote code execution vulnerabilities have been identified in GIMP (GNU Image Manipulation Program) related to parsing of PGM, XWD, and ICO image file formats. These vulnerabilities could allow an attacker to execute arbitrary code remotely by exploiting uninitialized memory, out-of-bounds writes, and other parsing errors. Red Hat has issued a security advisory for GIMP on Red Hat Enterprise Linux 9.2, providing updated packages to address these issues.

Multiple remote code execution vulnerabilities have been identified in GIMP affecting its parsing of PGM, XWD, and ICO image file formats. These vulnerabilities involve uninitialized memory usage, out-of-bounds writes, and parsing flaws that could allow remote attackers to execute arbitrary code. Red Hat has issued a security update for GIMP in Red Hat Enterprise Linux 9.6 Extended Update Support to address these issues.

Multiple security vulnerabilities were identified and fixed in GIMP version 3.0.6, including heap-based buffer overflows, out-of-bounds writes, integer overflows, and stack-based buffer overflows in various file parsing components. These issues could potentially allow remote code execution. The update addresses these vulnerabilities and includes various core and GUI improvements. The vulnerabilities were reported by the Zero Day Initiative and have been proactively mitigated by developers. A security update is available and should be applied to affected systems.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922) * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple security vulnerabilities have been identified in the GIMP image manipulation program as packaged in Red Hat Enterprise Linux 8.6 and 9. These include use-after-free, heap buffer overflows, and integer overflow issues in the XCF, TGA, and ICO file parsers respectively. Red Hat has released security updates addressing these issues. The vulnerabilities have been rated with a high severity impact by Red Hat Product Security. Users of affected Red Hat Enterprise Linux versions are advised to apply the provided updates to remediate these flaws.

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow.