Approved changes feed: RSS · Atom

cpe:2.3:a:gimp:gimp:2.6.7:*:*:*:*:*:*:*

part: a version: 2.6.7 update: *

VendorGimp (85555a31-58ef-5f59-917a-6bb1acfb7967)
ProductGimp (b791e0fa-2c6a-57eb-a6c3-9ce3d7f542be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gimp purl2cpe 2026-06-01 10:16:01.767336
pkg:deb/ubuntu/gimp purl2cpe 2026-06-01 10:16:01.767337
pkg:docker/gimp/gimp purl2cpe 2026-06-01 10:16:01.767339
pkg:github/gnome/gimp purl2cpe 2026-06-01 10:16:01.767340
pkg:gnome/gimp purl2cpe 2026-06-01 10:16:01.767342
pkg:rpm/fedora/gimp purl2cpe 2026-06-01 10:16:01.767343

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3909 vulnerable 2026-06-08 04:51:45.218853 Details available
Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.
Published: 2009-11-19T00:00:00.000Z
Updated: 2024-08-07T06:45:50.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1570 vulnerable 2026-06-08 04:51:23.977662 Details available
Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.
Published: 2009-11-13T15:00:00.000Z
Updated: 2024-08-07T05:20:34.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.