A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pygtk2-develUpgrade pygobject2-develUpgrade pygtk2-codegenUpgrade gimp-develUpgrade gimp-devel-toolsUpgrade gimpUpgrade python2-cairo-develUpgrade pygobject2-docUpgrade pygobject2Upgrade pygobject2-codegenUpgrade pygtk2Upgrade python2-cairoUpgrade pygtk2-docUpgrade gimp-libs | Jul 20, 2026 | Jul 16, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-devel-toolsUpgrade gimp-debuginfoUpgrade gimp-libsUpgrade gimp-develUpgrade gimp | Aug 5, 2026 | Aug 5, 2026 |
| Debian | — | Upgrade gimp | Aug 30, 2026 | Aug 30, 2026 |
| Redhat_linux | — | Upgrade pygtk2-debugsourceUpgrade pygobject2-codegenUpgrade pygobject2Upgrade pygtk2-develUpgrade gimp-debuginfoUpgrade gimp-devel-toolsUpgrade pygobject2-debuginfoUpgrade pygobject2-docUpgrade pygobject2-debugsourceUpgrade python2-cairo-develUpgrade gimpUpgrade pygtk2-codegenUpgrade python2-cairoUpgrade python2-pycairo-debugsourceUpgrade python2-cairo-debuginfoUpgrade gimp-libs-debuginfoUpgrade pygtk2-docUpgrade gimp-devel-tools-debuginfoNo solution existsUpgrade gimp-libsUpgrade pygtk2-debuginfoUpgrade pygobject2-develUpgrade gimp-debugsourceUpgrade pygtk2Upgrade gimp-devel | Jul 17, 2026 | Apr 11, 2026 |
| Rocky_linux | — | Upgrade pygtk2-debuginfoUpgrade gimp-devel-toolsUpgrade pygtk2Upgrade gimp-develUpgrade pygobject2-debugsourceUpgrade gimp-debugsourceUpgrade pygobject2-develUpgrade pygobject2-debuginfoUpgrade python2-cairo-debuginfoUpgrade gimp-debuginfoUpgrade pygobject2-docUpgrade gimp-devel-tools-debuginfoUpgrade pygobject2-codegenUpgrade python2-pycairo-debugsourceUpgrade gimp-libs-debuginfoUpgrade gimpUpgrade gimp-libsUpgrade python2-cairo-develUpgrade pygtk2-develUpgrade pygtk2-debugsourceUpgrade python2-cairoUpgrade pygtk2-codegenUpgrade pygobject2 | Sep 7, 2026 | Sep 2, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub