WID-SEC-W-2026-2219

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

GIMP: Mehrere Schwachstellen

view advisory published 2026-07-06

Ein Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

01

describes (9)

Related CVEs.

IDseverity exploitable
CVE-2026-58384UShigh7.8—
A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-ro…
CVE-2026-59089US——
A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table (CLUT) due to an…
CVE-2026-58380UShigh7.8—
A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a…
CVE-2026-58382US——
CVE-2026-58383US——
CVE-2026-58385US——
CVE-2026-58386US——
CVE-2026-58387US——
CVE-2026-58388US——
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan