Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GIMP — Vulnerabilities & Security Advisories 54

All 54 CVE vulnerabilities found in GIMP, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for GIMP, an open-source image editing application, focusing on specific weakness types associated with its security advisories. It collects publicly reported security flaws affecting GIMP, spanning its history from initial releases through recent updates. The repository organizes issues by vendor (GIMP), product (GIMP), and weakness classification, allowing users to track the evolution of its security posture. Readers can use this page to monitor the vendor’s advisory history, analyze recurring weakness patterns, and review the complete vulnerability timeline for the product. The data is structured to support technical analysis and risk assessment, providing a centralized view of known security defects without including individual CVE identifiers.

Vendor: GIMP

CVE ID Title CVSS Severity Published
CVE-2026-92248 Gimp: integer overflow when generating a thumbnail preview for a psd file CWE-190 7.8 High 2026-09-15
CVE-2026-82343 Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling CWE-120 6.1 Medium 2026-08-28
CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check CWE-125 6.1 Medium 2026-08-28
CVE-2026-82328 Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count CWE-125 6.1 Medium 2026-08-28
CVE-2026-82324 Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 CWE-125 6.1 Medium 2026-08-28
CVE-2026-79902 Gimp: stack vla size underflow denial of service in seattle CWE-190 5.5 Medium 2026-08-26
CVE-2026-80101 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation CWE-125 4.4 Medium 2026-08-25
CVE-2026-78475 Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader CWE-125 6.1 Medium 2026-08-24
CVE-2026-78465 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit CWE-190 7.0 High 2026-08-24
CVE-2026-18309 GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-18308 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-18307 GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 - - 2026-08-20
CVE-2026-18306 GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-18305 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-18304 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-18303 GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 - - 2026-08-20
CVE-2026-18302 GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 - - 2026-08-20
CVE-2026-18301 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-18300 GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 - - 2026-08-20
CVE-2026-66759 Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images CWE-125 7.1 High 2026-07-27
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images CWE-190 7.8 High 2026-07-27
CVE-2026-66757 Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images CWE-190 5.5 Medium 2026-07-27
CVE-2026-2050 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 - - 2026-06-24
CVE-2026-2049 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 - - 2026-06-10
CVE-2026-4154 GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AI High AI 2026-04-11
CVE-2026-4153 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AI High AI 2026-04-11
CVE-2026-4152 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AI High AI 2026-04-11
CVE-2026-4151 GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AI High AI 2026-04-11
CVE-2026-4150 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AI High AI 2026-04-11
CVE-2026-2048 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AI High AI 2026-02-20

All 54 known CVE vulnerabilities affecting GIMP with full Chinese analysis, references, and POCs where available.