https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T15:27:20.447977+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:75575 ALSA-2026:75575 — Important: gimp security update 2026-10-08T15:27:20.597980+00:00

Affected: AlmaLinux:9: gimp, AlmaLinux:9: gimp-libs

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947) * gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948) * gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248) * gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-368544 EUVD-2026-368544 2026-10-08T15:27:20.598057+00:00 EUVD-2026-368544 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90948 fkie_cve-2026-90948 2026-10-08T15:27:20.598077+00:00

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.

 https://cve.radiocsirt.org/vuln/ghsa-4gcm-x544-rhh4 GHSA-4gcm-x544-rhh4 2026-10-08T15:27:20.598110+00:00

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11890-1 openSUSE-SU-2026:11890-1 — gimp-3.2.6-3.1 on GA media 2026-10-08T15:27:20.598127+00:00

gimp-3.2.6-3.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90948 UBUNTU-CVE-2026-90948 2026-10-08T15:27:20.598148+00:00

Affected: Ubuntu:Pro:16.04:LTS: gimp, Ubuntu:Pro:18.04:LTS: gimp, Ubuntu:Pro:20.04:LTS: gimp, Ubuntu:Pro:22.04:LTS: gimp, Ubuntu:Pro:24.04:LTS: gimp, Ubuntu:26.04:LTS: gimp

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3358 WID-SEC-W-2026-3358 — GIMP Plugins: Mehrere Schwachstellen ermöglichen Codeausführung und DoS 2026-10-08T15:27:20.598178+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.