Open Source GIMP

Name: Open Source GIMP
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

1critical13high5medium0low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44443US	—	93.6% (100th)	—	2.10.36	2024-05-03	< 2.10.36
CVE-2023-44442US	—	61.2% (99th)	—	2.10.36	2024-05-03	< 2.10.36
CVE-2023-44444US	—	56.1% (99th)	—	2.10.36	2024-05-03	< 2.10.36
CVE-2023-44441US	—	27.3% (98th)	—	2.10.36	2024-05-03	< 2.10.36
CVE-2025-5473US	high8.8	23.5% (98th)	—	c855d1df	2025-06-06	< c855d1df
CVE-2025-2760US	high7.8	17.2% (97th)	—	3.0.0	2025-04-23	< 3.0.0
CVE-2025-2761US	high7.8	4.17% (91st)	—	3.0.0	2025-04-23	< 3.0.0
CVE-2026-4152US	—	0.74% (55th)	—	3.2.0	2026-04-11	< 3.2.0
CVE-2026-4150US	—	0.74% (54th)	—	3.2.0	2026-04-11	< 3.2.0
CVE-2022-32990US	medium5.5	0.67% (52nd)	—	2.10.32	2022-06-24	< 2.10.32
CVE-2026-4151US	—	0.66% (52nd)	—	3.2.0	2026-04-11	< 3.2.0
CVE-2026-59090US	critical9.9	0.65% (51st)	—	no fix	2026-08-10	≤ 3.2.4
CVE-2026-4153US	—	0.64% (50th)	—	3.2.0	2026-04-11	< 3.2.0
CVE-2026-4154US	—	0.60% (48th)	—	3.2.0	2026-04-11	< 3.2.0
CVE-2026-59087US	high7.8	0.49% (42nd)	—	no fix	2026-08-10	≤ 3.2.4
CVE-2026-59091US	high7.8	0.40% (35th)	—	no fix	2026-08-10	≤ 3.2.4
CVE-2026-40915US	high7.8	0.38% (31st)	—	3.2.2	2026-04-15	< 3.2.2
CVE-2025-8672US	high7.8OT elevated	0.34% (28th)	—	3.1.4.2	2025-08-11	< 3.1.4.2
CVE-2026-59088US	medium5.5	0.33% (26th)	—	no fix	2026-08-10	≤ 3.2.4
CVE-2026-40919US	medium5.5	0.33% (26th)	—	3.2.2	2026-04-15	< 3.2.2
CVE-2026-90949US	high7.8	0.33% (26th)	—	3.2.6	2026-09-14	< 3.2.6
CVE-2026-66759US	—	0.30% (23rd)	—	no fix	2026-07-27	2 versions
CVE-2026-66758US	—	0.30% (22nd)	—	no fix	2026-07-27	3 versions
CVE-2026-78465US	high7.0	0.28% (20th)	—	no fix	2026-08-24	≤ 3.2.4
CVE-2025-48797US	—	0.28% (20th)	—	2.99.16	2025-05-27	2 versions
CVE-2026-78475US	medium6.1	0.26% (18th)	—	no fix	2026-08-24	2 versions
CVE-2026-6384US	high7.8	0.26% (18th)	—	3.2.2	2026-04-15	< 3.2.2
CVE-2025-48798US	—	0.25% (16th)	—	2.99.16	2025-05-27	2 versions
CVE-2026-66757US	—	0.23% (14th)	—	no fix	2026-07-27	2 versions
CVE-2026-90948US	high7.8	0.23% (13th)	—	3.2.6	2026-09-14	< 3.2.6
CVE-2026-40916US	medium5.5	0.21% (11th)	—	3.2.2	2026-04-15	< 3.2.2
CVE-2025-48796US	—	0.21% (11th)	—	3.0.0	2025-05-27	2 versions
CVE-2026-40918US	—	0.20% (9th)	—	3.2.2	2026-04-15	< 3.2.2
CVE-2026-40917US	high7.1	0.17% (6th)	—	3.2.2	2026-04-15	< 3.2.2
CVE-2026-90947US	high7.8	0.13% (3rd)	—	3.2.6	2026-09-14	< 3.2.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-190Integer Overflow or Wraparound11 CVEs
CWE-787Out-of-bounds Write11 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-131Incorrect Calculation of Buffer Size2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-189CWE-1891 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan