A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pygobject2-docUpgrade python2-cairoUpgrade pygtk2Upgrade gimp-develUpgrade pygobject2-develUpgrade pygtk2-develUpgrade gimpUpgrade pygtk2-docUpgrade gimp-devel-toolsUpgrade pygobject2Upgrade pygobject2-codegenUpgrade pygtk2-codegenUpgrade python2-cairo-develUpgrade gimp-libs | May 14, 2026 | May 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimpUpgrade gimp-devel-toolsUpgrade gimp-libsUpgrade gimp-develUpgrade gimp-debuginfo | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade pygobject2-codegenUpgrade pygobject2Upgrade pygtk2-docUpgrade pygtk2-develUpgrade python2-cairoUpgrade pygobject2-docUpgrade gimpUpgrade gimp-devel-toolsUpgrade python2-cairo-develUpgrade pygobject2-develUpgrade pygtk2Upgrade gimp-develUpgrade gimp-libsUpgrade pygtk2-codegen | May 21, 2026 | Mar 26, 2026 |
| Redhat_linux | — | Upgrade pygtk2-debuginfoUpgrade pygobject2-codegenUpgrade python2-cairoUpgrade pygobject2-debuginfoUpgrade pygobject2-debugsourceUpgrade pygtk2-debugsourceUpgrade pygobject2-docUpgrade gimpUpgrade pygtk2-develUpgrade pygtk2-docUpgrade gimp-debuginfoUpgrade pygobject2Upgrade gimp-debugsourceUpgrade python2-cairo-develUpgrade pygtk2-codegenUpgrade gimp-libs-debuginfoUpgrade gimp-develUpgrade python2-pycairo-debugsourceUpgrade gimp-devel-tools-debuginfoUpgrade pygtk2Upgrade gimp-devel-toolsUpgrade python2-cairo-debuginfoNo solution existsUpgrade pygobject2-develUpgrade gimp-libs | May 13, 2026 | Mar 26, 2026 |
| Rocky_linux | — | Upgrade python2-pycairo-debugsourceUpgrade pygobject2-debugsourceUpgrade gimpUpgrade pygobject2-develUpgrade pygobject2-docUpgrade pygobject2Upgrade python2-cairo-develUpgrade pygtk2-codegenUpgrade gimp-libsUpgrade gimp-devel-toolsUpgrade gimp-develUpgrade pygtk2-debugsourceUpgrade gimp-devel-tools-debuginfoUpgrade gimp-debugsourceUpgrade pygtk2-debuginfoUpgrade gimp-libs-debuginfoUpgrade python2-cairoUpgrade pygtk2Upgrade pygtk2-develUpgrade pygobject2-debuginfoUpgrade pygobject2-codegenUpgrade gimp-debuginfoUpgrade python2-cairo-debuginfo | May 18, 2026 | May 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub