https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:54:24.816749+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:50817 ALSA-2026:50817 — Important: gimp security update 2026-10-03T20:54:24.956416+00:00

Affected: AlmaLinux:9: gimp, AlmaLinux:9: gimp-libs

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169) * gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758) * gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted ICNS images (CVE-2026-66759)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-379239 EUVD-2026-379239 2026-10-03T20:54:24.956483+00:00 EUVD-2026-379239 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42169 fkie_cve-2026-42169 2026-10-03T20:54:24.956500+00:00

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

 https://cve.radiocsirt.org/vuln/ghsa-xq2c-w9r3-rwr6 GHSA-xq2c-w9r3-rwr6 2026-10-03T20:54:24.956525+00:00

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

 https://cve.radiocsirt.org/vuln/oesa-2026-3413 OESA-2026-3413 — gimp security update 2026-10-03T20:54:24.956542+00:00

Affected: openEuler:24.03-LTS-SP1: gimp

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. Security Fix(es):

A vulnerability classified as critical has been found in GIMP (Image Processing Software) (unknown version).CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().This is going to have an impact on confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2026-42169)

 https://cve.radiocsirt.org/vuln/rhsa-2026:50817 RHSA-2026:50817 — Red Hat Security Advisory: gimp security update 2026-10-03T20:54:24.956569+00:00

gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted ICNS images

 https://cve.radiocsirt.org/vuln/rhsa-2026:73768 RHSA-2026:73768 — Red Hat Security Advisory: gimp security update 2026-10-03T20:54:24.956591+00:00

gimp: GIMP: Remote code execution via PSD file parsing integer overflow gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow gimp: GIMP: Remote code execution via TIF file parsing vulnerability gimp: GIMP: Arbitrary code execution via crafted TIF file parsing gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) gimp: gimp: Heap buffer overflow in read_channel_data() gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() gimp: gimp: Integer overflow in read_RLE_channel() gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-42169 UBUNTU-CVE-2026-42169 2026-10-03T20:54:24.956624+00:00

Affected: Ubuntu:Pro:16.04:LTS: gimp, Ubuntu:Pro:18.04:LTS: gimp, Ubuntu:Pro:20.04:LTS: gimp, Ubuntu:Pro:22.04:LTS: gimp, Ubuntu:Pro:24.04:LTS: gimp, Ubuntu:26.04:LTS: gimp

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.