GIMP

GIMP contains multiple heap-buffer-overflow vulnerabilities in its APNG and DDS file format loaders, which can lead to arbitrary code execution when a victim opens a specially crafted image file.

A critical out-of-bounds read vulnerability (CVE-2026-66759) has been identified in the GIMP file-icns plugin, where processing a crafted ICNS file with a truncated mask resource can lead to information disclosure of heap contents via leaked alpha channel pixel values or a denial of service due to an application crash.

A vulnerability in the GIMP file-fits plugin allows for an integer overflow when processing crafted FITS image files, occurring during memory allocation calculations for width and height, which leads to an undersized heap-based buffer, and subsequent writing of pixel data to this buffer causes a heap-based buffer overflow and memory corruption, resulting in arbitrary code execution or a denial of service.

A remote, anonymous attacker can exploit a vulnerability in GIMP to execute arbitrary program code.

A remote, anonymous attacker can exploit multiple unspecified vulnerabilities in GIMP to execute arbitrary program code, potentially leading to complete system compromise.

Multiple vulnerabilities in GIMP could allow an attacker to execute arbitrary code, disclose sensitive information, manipulate data, or cause a denial-of-service condition.