GNOME GIMP
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-92248 | | Gimp: integer overflow when generating a thumbnail preview for a psd file | HIGH 7.8 | 0.2 % | ||
| CVE-2026-82343 | | Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-82330 | ≥ 3.2.0 | Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-82328 | | Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-82324 | ≥ 3.0.0 | Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 | MEDIUM 6.1 | 0.2 % | ||
| CVE-2026-79902 | ≥ 3.1.4 | Gimp: stack vla size underflow denial of service in seattle | MEDIUM 5.5 | 0.3 % | ||
| CVE-2026-80101 | | Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation | MEDIUM 4.4 | 0.2 % | ||
| CVE-2026-78475 | ≥ 3.0.0 | Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader | MEDIUM 6.1 | 0.3 % | ||
| CVE-2026-78465 | | Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit | HIGH 7.0 | 0.3 % | ||
| CVE-2026-66759 | ≥ 2.99.14 | Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images | HIGH 7.1 | 0.3 % | ||
| CVE-2026-66757 | | Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images | MEDIUM 5.5 | 0.2 % | ||
| CVE-2026-66758 | | Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images | HIGH 7.8 | 0.3 % |