DeutschShown in its original language — a full translation is planned for a future version.
GIMP Plugins: Mehrere Schwachstellen ermöglichen Codeausführung und DoS
view advisory published 2026-09-14
Ein lokaler Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-90947US | high7.8 | — | ||
A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lea… | ||||
| CVE-2026-90949US | high7.8 | — | ||
A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the al… | ||||
| CVE-2026-90948US | high7.8 | — | ||
A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffe… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:75575 vom 2026-10-05external
- Red Hat Security Advisory RHSA-2026:84744 vom 2026-10-19external
- Amazon Linux Security Advisory ALAS2GIMP-2026-021 vom 2026-10-13external
- Red Hat Bugtracker 2533005 vom 2026-09-14external
- Red Hat Bugtracker 2533008 vom 2026-09-14external
- Red Hat Bugtracker 2533013 vom 2026-09-14external
- Rocky Linux Security Advisory RLSA-2026:84744 vom 2026-10-20external
- GitHub Security Advisory vom 2026-09-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan