Product
GIMP: PSD plug-in stack-based buffer overflow (CVE-2026-119528)
1 TTP 1 CVEGIMP contains a stack-based buffer overflow vulnerability in the PSD plug-in image resource header loader, allowing an attacker to execute arbitrary code via a crafted PSD file.
Integer Overflow Vulnerability in GIMP file-pvr Plug-in
2 TTPs 1 CVEAn integer overflow vulnerability in the GIMP file-pvr plug-in allows heap-based buffer overflow via malicious .pvr files, potentially leading to arbitrary code execution or application crashes.
Heap-Based Buffer Overflow in GIMP DDS Loader (CVE-2026-106062)
2 TTPs 1 CVEA heap-based buffer overflow in GIMP's DirectDraw Surface (DDS) loader allows for arbitrary code execution via a maliciously crafted image file.
Arbitrary Code Execution in GIMP via GIMPressionist Preset Files
1 TTP 1 CVEA memory corruption vulnerability in GIMP allows attackers to achieve arbitrary code execution by tricking a user into opening a maliciously crafted GIMPressionist preset file.
Heap-Based Buffer Overflow in GIMP PSP File Loader
1 TTP 1 CVEA heap-based buffer overflow in GIMP's PSP file loader, tracked as CVE-2026-90949, allows attackers to trigger crashes or arbitrary code execution via crafted image files.
Multiple Vulnerabilities in GIMP Lead to DoS and Information Disclosure
1 CVEMultiple vulnerabilities in GIMP (CVE-2024-10332, CVE-2024-10333) allow a local attacker to cause a denial-of-service condition or perform information disclosure via malicious input files.
Heap-based Buffer Overflows in GIMP APNG and DDS Loaders
1 TTP 5 CVEsGIMP contains multiple heap-buffer-overflow vulnerabilities in its APNG and DDS file format loaders, which can lead to arbitrary code execution when a victim opens a specially crafted image file.
Multiple Vulnerabilities in GIMP Plugins Allow Local Exploitation
2 TTPsA local attacker can exploit multiple vulnerabilities found in GIMP plugins to perform a Denial of Service attack, execute arbitrary code, or disclose confidential information on affected systems.
CVE-2026-58384: GIMP PSD Parser Integer Overflow Leads to RCE/DoS
2 TTPs 1 CVEAn integer overflow vulnerability (CVE-2026-58384) exists in GIMP's PSD parser within the `read_RLE_channel()` function, leading to undersized heap allocations that can cause subsequent heap memory corruption, potentially resulting in denial of service or arbitrary code execution.
CVE-2026-58380: GIMP PNM Parser Off-by-One Error Leads to RCE
1 CVEA high-severity off-by-one error, CVE-2026-58380, in GIMP's PNM file format parser (specifically the `pnmscanner_gettoken()` function) allows an attacker to corrupt memory by crafting a malicious PNM file, potentially leading to denial of service or arbitrary code execution when the file is opened.
CVE-2026-58379: GIMP Heap Buffer Overflow in PSP Parser Allows RCE
3 TTPs 1 CVEA heap buffer overflow vulnerability (CVE-2026-58379) in GIMP's Paint Shop Pro (PSP) file format parser allows a remote attacker to achieve arbitrary code execution or cause a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file, exploiting incorrect buffer size calculations when processing low bit-depth images.
GIMP Vulnerability Allows Remote Code Execution
2 rules 1 TTPA remote, anonymous attacker can exploit a vulnerability in GIMP to execute arbitrary program code.
GIMP Multiple Vulnerabilities Allow Remote Code Execution
2 rules 1 TTPA remote unauthenticated attacker can exploit multiple vulnerabilities in GIMP to execute arbitrary code, potentially leading to system compromise.
Multiple Vulnerabilities in GIMP
2 rules 3 TTPsMultiple vulnerabilities in GIMP could allow an attacker to execute arbitrary code, disclose sensitive information, manipulate data, or cause a denial-of-service condition.
GIMP Multiple Vulnerabilities Allow Remote Code Execution
2 rules 1 TTPA remote, anonymous attacker can exploit multiple unspecified vulnerabilities in GIMP to achieve arbitrary code execution on a vulnerable system.