GIMP güvenlik açıkları (CVE)

GIMP için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

71 sonuç
6.1Orta
CVE-2026-82343

Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a hea…

6.1Orta
CVE-2026-82330

Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can res…

6.1Orta
CVE-2026-82328

Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palette count) parameter. This incorrect validation leads to improper memory bounds checking, resulting i…

6.1Orta
CVE-2026-82324

Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafted IFF/ILBM image file, the plugin does not properly validate the HAM row size and improperly handles cases where the number of color planes (nPlanes) is zero. This c…

5.5Orta
CVE-2026-79902

Gimp: stack vla size underflow denial of service in seattle

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the stack without integer overflow checks, causing an unbounded stack allocation. This issue le…

4.4Orta
CVE-2026-80101

Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated …

6.1Orta
CVE-2026-78475

Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-b…

7.0Yüksek
CVE-2026-78465

Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

GNOME GIMP; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of p…

7.3Yüksek
CVE-2026-59091

Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file

gimp; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or …

8.4Yüksek
CVE-2026-59090

Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow

gimp; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions; Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to …

5.5Orta
CVE-2026-59088

Gimp: gimp: denial of service via signed integer overflow in fli file processing

gimp; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width …

7.8Yüksek
CVE-2026-59087

Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation

gimp; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a…

5.5Orta
CVE-2026-6695

Gimp: gimp: remote code execution via crafted paa file

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap-based out-of-bounds write in the decode_lzss() function of the PAA file format…

7.1Yüksek
CVE-2026-66759

Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images

GNOME GIMP; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. If a crafted file contains a trun…