Approved changes feed: RSS · Atom
cpe:2.3:a:gimp:gimp:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Gimp (85555a31-58ef-5f59-917a-6bb1acfb7967) |
|---|---|
| Product | Gimp (b791e0fa-2c6a-57eb-a6c3-9ce3d7f542be) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/gimp |
purl2cpe | 2026-06-01 10:16:01.765753 |
pkg:deb/ubuntu/gimp |
purl2cpe | 2026-06-01 10:16:01.765755 |
pkg:docker/gimp/gimp |
purl2cpe | 2026-06-01 10:16:01.765756 |
pkg:github/gnome/gimp |
purl2cpe | 2026-06-01 10:16:01.765757 |
pkg:gnome/gimp |
purl2cpe | 2026-06-01 10:16:01.765759 |
pkg:rpm/fedora/gimp |
purl2cpe | 2026-06-01 10:16:01.765760 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6384 |
vulnerable | 2026-06-08 08:07:04.721301 |
Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing
HIGH (7.3)
A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.
Published: 2026-04-15T19:09:10.587Z
Updated: 2026-11-04T22:52:17.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40919 |
vulnerable | 2026-06-08 08:01:21.135220 |
Gimp: gimp: denial of service via specially crafted seattle filmworks file
MEDIUM (6.1)
A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmworks` plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), leading to the plugin crashing and potentially impacting the stability of the GIMP application.
Published: 2026-04-15T18:59:16.272Z
Updated: 2026-11-05T21:25:04.140Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40918 |
vulnerable | 2026-06-08 08:01:21.134607 |
Gimp: gimp: denial of service via crafted pvr image file
MEDIUM (5.5)
A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.
Published: 2026-04-15T18:59:14.823Z
Updated: 2026-11-05T21:25:01.129Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40917 |
vulnerable | 2026-06-08 08:01:21.134042 |
Gimp: gimp: application crashes or information disclosure via crafted icns image files
MEDIUM (5)
A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process such files.
Published: 2026-04-15T18:59:09.003Z
Updated: 2026-11-07T05:02:20.982Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40916 |
vulnerable | 2026-06-08 08:01:21.133426 |
Gimp: gimp: denial of service due to stack buffer overflow in tim image loader
MEDIUM (5)
A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service (DoS). By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a variable-length array.
Published: 2026-04-15T18:58:57.615Z
Updated: 2026-11-07T05:02:06.709Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40915 |
vulnerable | 2026-06-08 08:01:21.132815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44443 |
vulnerable | 2026-06-08 06:12:41.036340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.