GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimpUpgrade gimp-libs | Nov 21, 2022 | May 17, 2022 |
| Amazon Linux Ami 2 | — | Upgrade gimp-libsUpgrade gimp-debuginfoUpgrade gimpUpgrade gimp-devel-toolsUpgrade gimp-devel | May 20, 2026 | May 20, 2026 |
| Centos_linux | — | Upgrade gimp-devel-tools-debuginfoUpgrade gimp-libsUpgrade gimpUpgrade gimp-libs-debuginfoUpgrade gimp-debugsourceUpgrade gimp-debuginfo | Nov 16, 2022 | May 17, 2022 |
| Debian | — | Upgrade gimp | Nov 27, 2023 | May 17, 2022 |
| Gentoo Linux | — | Upgrade media-gfx/gimp. | Jan 20, 2025 | May 17, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade gimpUpgrade gimp-libs | Oct 28, 2022 | May 17, 2022 |
| Oracle_linux | — | Upgrade gimp-libsUpgrade gimp | Nov 22, 2022 | May 17, 2022 |
| Redhat_linux | — | No solution existsUpgrade gimp-libsUpgrade gimp-libs-debuginfoUpgrade gimp-debugsourceUpgrade gimp-devel-tools-debuginfoUpgrade gimpUpgrade gimp-debuginfo | Nov 16, 2022 | May 17, 2022 |
| Rocky_linux | — | Upgrade gimp-debuginfoUpgrade gimp-debugsourceUpgrade gimp-libs-debuginfoUpgrade gimp-libsUpgrade gimp | Mar 12, 2024 | May 17, 2022 |
| Suse | — | Upgrade libgimpui-2_0-0Upgrade gimpUpgrade gimp-plugin-aaUpgrade libgimp-2_0-0Upgrade gimp-develUpgrade gimp-plugins-pythonUpgrade gimp-langUpgrade libgimpui-2_0-0-32bitUpgrade libgimp-2_0-0-32bit | Oct 26, 2022 | May 17, 2022 |
| Ubuntu | — | Upgrade gimp | Nov 30, 2023 | May 17, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub