rpm package
almalinux/gimp
pkg:rpm/almalinux/gimp
Vulnerabilities (47)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-4887 | Med | 6.1 | < 2:3.0.4-1.el9_7.5 | 2:3.0.4-1.el9_7.5 | Mar 26, 2026 | A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosu | |
| CVE-2026-2048 | Hig | 7.8 | < 2:3.0.4-1.el9_7.4 | 2:3.0.4-1.el9_7.4 | Feb 20, 2026 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malici | |
| CVE-2026-2047 | Hig | 7.8 | < 2:3.0.4-1.el9_7.4 | 2:3.0.4-1.el9_7.4 | Feb 20, 2026 | GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit | |
| CVE-2026-2045 | Hig | 7.3 | < 2:3.0.4-1.el9_7.4 | 2:3.0.4-1.el9_7.4 | Feb 20, 2026 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malici | |
| CVE-2026-2044 | Hig | 8.8 | < 2:3.0.4-1.el9_7.4 | 2:3.0.4-1.el9_7.4 | Feb 20, 2026 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malic | |
| CVE-2026-0797 | Hig | 8.8 | < 2:3.0.4-1.el9_7.4 | 2:3.0.4-1.el9_7.4 | Feb 20, 2026 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a | |
| CVE-2025-15059 | Hig | 7.8 | < 2:3.0.4-1.el9_7.3 | 2:3.0.4-1.el9_7.3 | Jan 23, 2026 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a | |
| CVE-2025-14425 | Hig | 7.8 | < 2:3.0.4-1.el9_7.2 | 2:3.0.4-1.el9_7.2 | Dec 23, 2025 | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a | |
| CVE-2025-14424 | Hig | 7.8 | < 2:3.0.4-1.el9_7.2 | 2:3.0.4-1.el9_7.2 | Dec 23, 2025 | GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious p | |
| CVE-2025-14423 | Hig | 7.8 | < 2:3.0.4-1.el9_7.2 | 2:3.0.4-1.el9_7.2 | Dec 23, 2025 | GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit | |
| CVE-2025-14422 | Hig | 7.8 | < 2:3.0.4-1.el9_7.2 | 2:3.0.4-1.el9_7.2 | Dec 23, 2025 | GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious | |
| CVE-2025-10934 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a | |
| CVE-2025-10925 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit | |
| CVE-2025-10924 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious | |
| CVE-2025-10923 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a maliciou | |
| CVE-2025-10922 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a | |
| CVE-2025-10921 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a | |
| CVE-2025-10920 | Hig | 7.8 | < 2:3.0.4-1.el9_7.1 | 2:3.0.4-1.el9_7.1 | Oct 29, 2025 | GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malic | |
| CVE-2025-5473 | Hig | 8.8 | < 2:2.99.8-4.el9_6.2 | 2:2.99.8-4.el9_6.2 | Jun 6, 2025 | GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious | |
| CVE-2025-48798 | Hig | 7.3 | < 2:2.99.8-4.el9_6.2 | 2:2.99.8-4.el9_6.2 | May 27, 2025 | A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues. |
- affected < 2:3.0.4-1.el9_7.5fixed 2:3.0.4-1.el9_7.5
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosu
- affected < 2:3.0.4-1.el9_7.4fixed 2:3.0.4-1.el9_7.4
GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malici
- affected < 2:3.0.4-1.el9_7.4fixed 2:3.0.4-1.el9_7.4
GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit
- affected < 2:3.0.4-1.el9_7.4fixed 2:3.0.4-1.el9_7.4
GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malici
- affected < 2:3.0.4-1.el9_7.4fixed 2:3.0.4-1.el9_7.4
GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malic
- affected < 2:3.0.4-1.el9_7.4fixed 2:3.0.4-1.el9_7.4
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a
- affected < 2:3.0.4-1.el9_7.3fixed 2:3.0.4-1.el9_7.3
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a
- affected < 2:3.0.4-1.el9_7.2fixed 2:3.0.4-1.el9_7.2
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a
- affected < 2:3.0.4-1.el9_7.2fixed 2:3.0.4-1.el9_7.2
GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious p
- affected < 2:3.0.4-1.el9_7.2fixed 2:3.0.4-1.el9_7.2
GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit
- affected < 2:3.0.4-1.el9_7.2fixed 2:3.0.4-1.el9_7.2
GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a maliciou
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a
- affected < 2:3.0.4-1.el9_7.1fixed 2:3.0.4-1.el9_7.1
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malic
- affected < 2:2.99.8-4.el9_6.2fixed 2:2.99.8-4.el9_6.2
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious
- affected < 2:2.99.8-4.el9_6.2fixed 2:2.99.8-4.el9_6.2
A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.
Page 2 of 3