Approved changes feed: RSS · Atom

cpe:2.3:a:gimp:gimp:2.8.22:*:*:*:*:*:*:*

part: a version: 2.8.22 update: *

VendorGimp (85555a31-58ef-5f59-917a-6bb1acfb7967)
ProductGimp (b791e0fa-2c6a-57eb-a6c3-9ce3d7f542be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gimp purl2cpe 2026-06-01 10:16:01.767489
pkg:deb/ubuntu/gimp purl2cpe 2026-06-01 10:16:01.767490
pkg:docker/gimp/gimp purl2cpe 2026-06-01 10:16:01.767492
pkg:github/gnome/gimp purl2cpe 2026-06-01 10:16:01.767493
pkg:gnome/gimp purl2cpe 2026-06-01 10:16:01.767495
pkg:rpm/fedora/gimp purl2cpe 2026-06-01 10:16:01.767496

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17789 vulnerable 2026-06-08 05:09:09.909095 Details available
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
Published: 2017-12-20T09:00:00.000Z
Updated: 2024-08-05T20:59:17.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17788 vulnerable 2026-06-08 05:09:09.908613 Details available
In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.
Published: 2017-12-20T09:00:00.000Z
Updated: 2024-08-05T20:59:17.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17787 vulnerable 2026-06-08 05:09:09.908124 Details available
In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.
Published: 2017-12-20T09:00:00.000Z
Updated: 2024-08-05T20:59:17.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17786 vulnerable 2026-06-08 05:09:09.907329 Details available
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA image.
Published: 2017-12-20T09:00:00.000Z
Updated: 2024-08-05T20:59:17.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17785 vulnerable 2026-06-08 05:09:09.906825 Details available
In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.
Published: 2017-12-20T09:00:00.000Z
Updated: 2024-08-05T20:59:17.922Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17784 vulnerable 2026-06-08 05:09:09.906231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.