| CVE-2026-92248 |
Gimp: integer overflow when generating a thumbnail preview for a psd file
|
7.8
High
|
Sep 15, 2026 |
| CVE-2026-82343 |
Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
|
6.1
Medium
|
Aug 28, 2026 |
| CVE-2026-82330 |
Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
|
6.1
Medium
|
Aug 28, 2026 |
| CVE-2026-82328 |
Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count
|
6.1
Medium
|
Aug 28, 2026 |
| CVE-2026-82324 |
Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0
|
6.1
Medium
|
Aug 28, 2026 |
| CVE-2026-79902 |
Gimp: stack vla size underflow denial of service in seattle
|
5.5
Medium
|
Aug 26, 2026 |
| CVE-2026-80101 |
Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
|
4.4
Medium
|
Aug 25, 2026 |
| CVE-2026-78475 |
Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader
|
6.1
Medium
|
Aug 24, 2026 |
| CVE-2026-78465 |
Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit
|
7.0
High
|
Aug 24, 2026 |
| CVE-2026-66759 |
Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images
|
7.1
High
|
Jul 27, 2026 |
| CVE-2026-66757 |
Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images
|
5.5
Medium
|
Jul 27, 2026 |
| CVE-2026-66758 |
Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images
|
7.8
High
|
Jul 27, 2026 |