https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:33:11 +0000 https://vulnerability.circl.lu/vuln/alsa-2026:61587 <p><strong>Affected:</strong> AlmaLinux:9: gimp, AlmaLinux:9: gimp-libs</p> <p>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.</p> <p>Security Fix(es):</p> <p>* gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow (CVE-2026-18308) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: gimp, AlmaLinux:9: gimp-libs</p> <p>The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.</p> <p>Security Fix(es):</p> <p>* gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow (CVE-2026-18308) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://vulnerability.circl.lu/vuln/alsa-2026:61587 https://vulnerability.circl.lu/vuln/fkie_cve-2026-59090 <p>A flaw was found in GIMP&#39;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&#39;s system.</p> <p>A flaw was found in GIMP&#39;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&#39;s system.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-59090 https://vulnerability.circl.lu/vuln/ghsa-gfh5-q868-q4pw <p>A flaw was found in GIMP&#39;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&#39;s system.</p> <p>A flaw was found in GIMP&#39;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&#39;s system.</p> https://vulnerability.circl.lu/vuln/ghsa-gfh5-q868-q4pw https://vulnerability.circl.lu/vuln/oesa-2026-3573 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: gimp</p> <p>The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. Security Fix(es):</p> <p>A flaw was found in GIMP&amp;apos;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&amp;apos;s system.(CVE-2026-59090)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: gimp</p> <p>The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. Security Fix(es):</p> <p>A flaw was found in GIMP&amp;apos;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&amp;apos;s system.(CVE-2026-59090)</p> https://vulnerability.circl.lu/vuln/oesa-2026-3573 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11547-1 <p>gimp-3.2.4-4.1 on GA media</p> <p>gimp-3.2.4-4.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11547-1 https://vulnerability.circl.lu/vuln/rhsa-2026:73768 <p>gimp: GIMP: Remote code execution via PSD file parsing integer overflow gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow gimp: GIMP: Remote code execution via TIF file parsing vulnerability gimp: GIMP: Arbitrary code execution via crafted TIF file parsing gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) gimp: gimp: Heap buffer overflow in read_channel_data() gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() gimp: gimp: Integer overflow in read_RLE_channel() gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images</p> <p>gimp: GIMP: Remote code execution via PSD file parsing integer overflow gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow gimp: GIMP: Remote code execution via TIF file parsing vulnerability gimp: GIMP: Arbitrary code execution via crafted TIF file parsing gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) gimp: gimp: Heap buffer overflow in read_channel_data() gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() gimp: gimp: Integer overflow in read_RLE_channel() gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images</p> https://vulnerability.circl.lu/vuln/rhsa-2026:73768 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-59090 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gimp, Ubuntu:Pro:18.04:LTS: gimp, Ubuntu:Pro:20.04:LTS: gimp, Ubuntu:Pro:22.04:LTS: gimp, Ubuntu:Pro:24.04:LTS: gimp, Ubuntu:26.04:LTS: gimp</p> <p>A flaw was found in GIMP&#39;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&#39;s system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gimp, Ubuntu:Pro:18.04:LTS: gimp, Ubuntu:Pro:20.04:LTS: gimp, Ubuntu:Pro:22.04:LTS: gimp, Ubuntu:Pro:24.04:LTS: gimp, Ubuntu:26.04:LTS: gimp</p> <p>A flaw was found in GIMP&#39;s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim&#39;s system.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-59090