Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade gimp | Aug 30, 2017 | Jul 12, 2016 |
| Debian | — | Upgrade gimp | Jul 4, 2016 | Jul 1, 2016 |
| Freebsd | — | Upgrade gimp-app | Dec 10, 2025 | Jul 19, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade gimp-libsUpgrade gimp-helpUpgrade gimp | Nov 30, 2017 | Jul 12, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade gimpUpgrade gimp-libs | Dec 4, 2019 | Jul 12, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gimpUpgrade gimp-libs | Sep 25, 2019 | Jul 12, 2016 |
| Oracle Solaris | — | Upgrade image/editor/gimp to version 2.6.10-0.175.3.16.0.1.0 on Solaris 11.3 | May 29, 2017 | Jul 12, 2016 |
| Oracle_linux | — | Upgrade gimp-develUpgrade gimp-help-zh_CNUpgrade gimp-help-itUpgrade gimp-help-caUpgrade gimp-help-koUpgrade gimp-help-nnUpgrade gimp-helpUpgrade gimp-help-elUpgrade gimp-help-nlUpgrade gimp-help-pt_BRUpgrade gimp-devel-toolsUpgrade gimp-libsUpgrade gimp-help-esUpgrade gimp-help-en_GBUpgrade gimp-help-deUpgrade gimp-help-daUpgrade gimp-help-jaUpgrade gimp-help-ruUpgrade gimp-help-slUpgrade gimpUpgrade gimp-help-svUpgrade gimp-help-fr | Nov 9, 2016 | Jun 20, 2016 |
| Redhat_linux | — | Upgrade gimp-help-ruUpgrade gimp-help-deUpgrade gimp-help-daUpgrade gimp-help-frUpgrade gimp-help-slUpgrade gimp-help-pt_BRUpgrade gimp-develUpgrade gimp-help-esUpgrade gimp-helpUpgrade gimp-libsUpgrade gimp-devel-toolsUpgrade gimp-debuginfoUpgrade gimp-help-jaUpgrade gimpUpgrade gimp-help-svUpgrade gimp-help-nlUpgrade gimp-help-elUpgrade gimp-help-itUpgrade gimp-help-nnUpgrade gimp-help-en_GBNo solution existsUpgrade gimp-help-zh_CNUpgrade gimp-help-koUpgrade gimp-help-ca | Nov 4, 2016 | Jul 12, 2016 |
| Suse | — | Upgrade gimpUpgrade gimp-langUpgrade libgimpui-2_0-0Upgrade gimp-plugin-aaUpgrade gimp-plugins-pythonUpgrade libgimp-2_0-0Upgrade gimp-devel | Jul 26, 2016 | Jul 12, 2016 |
| Ubuntu | — | Upgrade gimp | Jul 5, 2016 | Jul 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub