https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:22:19.182319+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7978 ALSA-2022:7978 — Moderate: gimp security and enhancement update 2026-10-07T12:22:19.366716+00:00

Affected: AlmaLinux:9: gimp, AlmaLinux:9: gimp-libs

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: buffer overflow through a crafted XCF file (CVE-2022-30067) * gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-03848 bdu:2023-03848 2026-10-07T12:22:19.366775+00:00 bdu:2023-03848 https://cve.radiocsirt.org/vuln/cnvd-2022-65334 cnvd-2022-65334 2026-10-07T12:22:19.366793+00:00 cnvd-2022-65334 https://cve.radiocsirt.org/vuln/euvd-2026-17460 EUVD-2026-17460 2026-10-07T12:22:19.366805+00:00 EUVD-2026-17460 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32990 fkie_cve-2022-32990 2026-10-07T12:22:19.366815+00:00

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/ghsa-fj77-3fg4-77vh GHSA-fj77-3fg4-77vh 2026-10-07T12:22:19.366835+00:00

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/gsd-2022-32990 gsd-2022-32990 2026-10-07T12:22:19.366849+00:00 gsd-2022-32990 https://cve.radiocsirt.org/vuln/oesa-2026-2881 OESA-2026-2881 — gimp security update 2026-10-07T12:22:19.366859+00:00

Affected: openEuler:20.03-LTS-SP4: gimp

Security Fix(es):

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).(CVE-2022-32990)

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.(CVE-2026-4150)

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.(CVE-202…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14534-1 openSUSE-SU-2024:14534-1 — gimp-2.10.38-4.1 on GA media 2026-10-07T12:22:19.366894+00:00

gimp-2.10.38-4.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:2867-1 SUSE-SU-2022:2867-1 — Security update for gimp 2026-10-07T12:22:19.366913+00:00

Security update for gimp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32990 UBUNTU-CVE-2022-32990 2026-10-07T12:22:19.366928+00:00

Affected: Ubuntu:Pro:16.04:LTS: gimp, Ubuntu:Pro:18.04:LTS: gimp, Ubuntu:20.04:LTS: gimp, Ubuntu:22.04:LTS: gimp

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0547 WID-SEC-W-2022-0547 — GIMP: Schwachstelle ermöglicht Denial of Service 2026-10-07T12:22:19.366949+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GIMP ausnutzen, um einen Denial of Service Angriff durchzuführen.