Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gimp | Aug 30, 2017 | Jul 12, 2016 |
| Debian | — | Upgrade gimp | Jul 4, 2016 | Jul 1, 2016 |
| Freebsd | — | Upgrade gimp-app | Dec 10, 2025 | Jul 19, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gimp-libsUpgrade gimp-helpUpgrade gimp | Nov 30, 2017 | Jul 12, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gimp-libsUpgrade gimp | Dec 4, 2019 | Jul 12, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gimp-libsUpgrade gimp | Sep 25, 2019 | Jul 12, 2016 |
| Oracle Solaris | — | Upgrade image/editor/gimp to version 2.6.10-0.175.3.16.0.1.0 on Solaris 11.3 | May 29, 2017 | Jul 12, 2016 |
| Oracle_linux | — | Upgrade gimp-help-itUpgrade gimp-help-nnUpgrade gimp-help-caUpgrade gimp-help-zh_CNUpgrade gimp-develUpgrade gimp-help-elUpgrade gimp-help-koUpgrade gimp-helpUpgrade gimp-help-nlUpgrade gimp-devel-toolsUpgrade gimp-libsUpgrade gimp-help-frUpgrade gimp-help-deUpgrade gimp-help-esUpgrade gimp-help-slUpgrade gimp-help-jaUpgrade gimp-help-ruUpgrade gimpUpgrade gimp-help-svUpgrade gimp-help-daUpgrade gimp-help-en_GBUpgrade gimp-help-pt_BR | Nov 9, 2016 | Jun 20, 2016 |
| Redhat_linux | — | Upgrade gimp-devel-toolsUpgrade gimp-debuginfoUpgrade gimpUpgrade gimp-develUpgrade gimp-help-nlUpgrade gimp-libsUpgrade gimp-help-esUpgrade gimp-help-jaUpgrade gimp-help-elUpgrade gimp-help-daUpgrade gimp-help-svUpgrade gimp-help-ruUpgrade gimp-help-pt_BRUpgrade gimp-helpUpgrade gimp-help-deUpgrade gimp-help-slUpgrade gimp-help-frUpgrade gimp-help-koNo solution existsUpgrade gimp-help-itUpgrade gimp-help-en_GBUpgrade gimp-help-caUpgrade gimp-help-nnUpgrade gimp-help-zh_CN | Nov 4, 2016 | Jul 12, 2016 |
| Suse | — | Upgrade libgimp-2_0-0Upgrade gimp-plugin-aaUpgrade gimp-langUpgrade gimpUpgrade gimp-plugins-pythonUpgrade libgimpui-2_0-0Upgrade gimp-devel | Jul 26, 2016 | Jul 12, 2016 |
| Ubuntu | — | Upgrade gimp | Jul 5, 2016 | Jul 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub