GCVE - cpe:2.3:a:gegl:gegl:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gegl:gegl:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gegl (`6cf10816-b781-5fde-a96d-a4d8ccc7d0bc`)
Product	Gegl (`22275341-38a2-5d05-9050-3a214ec9138a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gegl`	purl2cpe	2026-06-01 10:13:40.828994
`pkg:deb/ubuntu/gegl`	purl2cpe	2026-06-01 10:13:40.828998
`pkg:github/gnome/gegl`	purl2cpe	2026-06-01 10:13:40.829003
`pkg:rpm/opensuse/gegl`	purl2cpe	2026-06-01 10:13:40.829007

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-45463`	vulnerable	2026-06-08 05:36:48.188682	Details available load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature. Published: 2021-12-23T06:00:57.000Z Updated: 2025-11-03T17:30:48.933Z Open on db.gcve.eu Reference links https://gitlab.gnome.org/GNOME/gegl/-/blob/master/docs/NEWS.adoc https://gitlab.gnome.org/GNOME/gegl/-/commit/bfce470f0f2f37968862129d5038b35429f2909b https://gitlab.gnome.org/GNOME/gimp/-/commit/e8a31ba4f2ce7e6bc34882dc27c97fba993f5868 https://www.gimp.org/news/2021/12/21/gimp-2-10-30-released/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG635WJCNXHJM5U4BGMAAP4NK2YFTQXK/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10114`	vulnerable	2026-06-08 05:10:26.352764	Details available An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppm_load_read_header function in operations/external/ppm-load.c. Published: 2018-04-14T14:00:00.000Z Updated: 2024-08-05T07:32:01.286Z Open on db.gcve.eu Reference links https://bugzilla.gnome.org/show_bug.cgi?id=795248 https://github.com/xiaoqx/pocs/tree/master/gegl	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10112`	vulnerable	2026-06-08 05:10:26.350911	Details available An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46. Published: 2018-04-14T14:00:00.000Z Updated: 2024-08-05T07:32:01.158Z Open on db.gcve.eu Reference links https://bugzilla.gnome.org/show_bug.cgi?id=795249 https://github.com/xiaoqx/pocs/tree/master/gegl	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-10111`	vulnerable	2026-06-08 05:10:26.350497	Details available An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure. Published: 2018-04-14T14:00:00.000Z Updated: 2024-08-05T07:32:01.226Z Open on db.gcve.eu Reference links https://github.com/xiaoqx/pocs/tree/master/gegl	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.