Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-gimp | Aug 30, 2017 | Jul 12, 2016 |
| Debian | debian-upgrade-gimp | Jul 4, 2016 | Jul 1, 2016 | |
| Freebsd | freebsd-upgrade-package-gimp-app | Dec 10, 2025 | Jul 19, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-gimphuawei-euleros-2_0_sp1-upgrade-gimp-helphuawei-euleros-2_0_sp1-upgrade-gimp-libs | Nov 30, 2017 | Jul 12, 2016 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-gimphuawei-euleros-2_0_sp2-upgrade-gimp-libs | Dec 4, 2019 | Jul 12, 2016 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-gimphuawei-euleros-2_0_sp3-upgrade-gimp-libs | Sep 25, 2019 | Jul 12, 2016 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-image-editor-gimp-2-6-10-0-175-3-16-0-1-0 | May 29, 2017 | Jul 12, 2016 | |
| Oracle_linux | — | oracle-linux-upgrade-gimporacle-linux-upgrade-gimp-develoracle-linux-upgrade-gimp-devel-toolsoracle-linux-upgrade-gimp-helporacle-linux-upgrade-gimp-help-caoracle-linux-upgrade-gimp-help-daoracle-linux-upgrade-gimp-help-deoracle-linux-upgrade-gimp-help-eloracle-linux-upgrade-gimp-help-en-gboracle-linux-upgrade-gimp-help-esoracle-linux-upgrade-gimp-help-froracle-linux-upgrade-gimp-help-itoracle-linux-upgrade-gimp-help-jaoracle-linux-upgrade-gimp-help-kooracle-linux-upgrade-gimp-help-nloracle-linux-upgrade-gimp-help-nnoracle-linux-upgrade-gimp-help-pt-broracle-linux-upgrade-gimp-help-ruoracle-linux-upgrade-gimp-help-sloracle-linux-upgrade-gimp-help-svoracle-linux-upgrade-gimp-help-zh-cnoracle-linux-upgrade-gimp-libs | Nov 9, 2016 | Jun 20, 2016 |
| Redhat_linux | — | redhat-upgrade-gimpredhat-upgrade-gimp-debuginforedhat-upgrade-gimp-develredhat-upgrade-gimp-devel-toolsredhat-upgrade-gimp-helpredhat-upgrade-gimp-help-caredhat-upgrade-gimp-help-daredhat-upgrade-gimp-help-deredhat-upgrade-gimp-help-elredhat-upgrade-gimp-help-en_gbredhat-upgrade-gimp-help-esredhat-upgrade-gimp-help-frredhat-upgrade-gimp-help-itredhat-upgrade-gimp-help-jaredhat-upgrade-gimp-help-koredhat-upgrade-gimp-help-nlredhat-upgrade-gimp-help-nnredhat-upgrade-gimp-help-pt_brredhat-upgrade-gimp-help-ruredhat-upgrade-gimp-help-slredhat-upgrade-gimp-help-svredhat-upgrade-gimp-help-zh_cnredhat-upgrade-gimp-libs | Nov 4, 2016 | Jul 12, 2016 |
| Suse | — | suse-upgrade-gimpsuse-upgrade-gimp-develsuse-upgrade-gimp-langsuse-upgrade-gimp-plugin-aasuse-upgrade-gimp-plugins-pythonsuse-upgrade-libgimp-2_0-0suse-upgrade-libgimpui-2_0-0 | Jul 26, 2016 | Jul 12, 2016 |
| Ubuntu | ubuntu-upgrade-gimp | Jul 5, 2016 | Jul 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub