Most recent entries from all

ALSA-2026:2707 — Important: gimp security update

Affected: AlmaLinux:9: gimp, AlmaLinux:9: gimp-libs

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: heap-based buffer overflow via specially crafted PSP file (CVE-2025-15059)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-07243

EUVD-2026-337750

fkie_cve-2025-15059

The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.

GHSA-h948-x7vm-x59c

OESA-2026-1001 — gimp security update

Affected: openEuler:24.03-LTS-SP3: gimp

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. Security Fix(es):

A vulnerability has been found in GIMP (Image Processing Software) and classified as critical. The CWE definition for the vulnerability is CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). As an impact it is known to affect confidentiality, integrity, and availability. Applying the patch 03575ac8cbb0ef3103b0a15d6598475088dcc15e is able to eliminate this problem.(CVE-2025-15059)

openSUSE-RU-2026:20168-1 — Recommended update for gimp

Recommended update for gimp

RHSA-2026:2950 — Red Hat Security Advisory: gimp security update

gimp: heap-based buffer overflow via specially crafted PSP file

UBUNTU-CVE-2025-15059

Affected: Ubuntu:Pro:22.04:LTS: gimp, Ubuntu:Pro:24.04:LTS: gimp, Ubuntu:25.10: gimp, Ubuntu:26.04:LTS: gimp

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.

WID-SEC-W-2025-2931 — GIMP: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in GIMP ausnutzen, um beliebigen Programmcode auszuführen.