A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pygtk2-docUpgrade pygobject2-codegenUpgrade pygtk2-codegenUpgrade pygobject2Upgrade python2-cairo-develUpgrade pygtk2-develUpgrade gimp-libsUpgrade gimp-devel-toolsUpgrade gimpUpgrade gimp-develUpgrade pygobject2-docUpgrade pygtk2Upgrade python2-cairoUpgrade pygobject2-devel | May 14, 2026 | May 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-devel-toolsUpgrade gimpUpgrade gimp-libsUpgrade gimp-develUpgrade gimp-debuginfo | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade gimp-develUpgrade pygtk2Upgrade gimp-libsUpgrade pygobject2-docUpgrade pygobject2-develUpgrade python2-cairo-develUpgrade pygtk2-codegenUpgrade pygobject2Upgrade pygtk2-docUpgrade python2-cairoUpgrade pygtk2-develUpgrade gimpUpgrade pygobject2-codegenUpgrade gimp-devel-tools | May 21, 2026 | Mar 26, 2026 |
| Redhat_linux | — | Upgrade pygobject2Upgrade gimp-libs-debuginfoUpgrade gimp-devel-tools-debuginfoNo solution existsUpgrade python2-cairo-debuginfoUpgrade pygtk2Upgrade gimp-devel-toolsUpgrade python2-cairo-develUpgrade gimp-develUpgrade gimp-libsUpgrade pygobject2-develUpgrade python2-pycairo-debugsourceUpgrade gimp-debugsourceUpgrade pygobject2-debuginfoUpgrade python2-cairoUpgrade pygobject2-debugsourceUpgrade pygtk2-debuginfoUpgrade pygobject2-docUpgrade pygtk2-docUpgrade gimpUpgrade pygobject2-codegenUpgrade pygtk2-develUpgrade pygtk2-debugsourceUpgrade gimp-debuginfoUpgrade pygtk2-codegen | May 13, 2026 | Mar 26, 2026 |
| Rocky_linux | — | Upgrade python2-cairo-develUpgrade gimpUpgrade pygobject2Upgrade pygobject2-docUpgrade gimp-devel-tools-debuginfoUpgrade gimp-develUpgrade gimp-libsUpgrade pygtk2-codegenUpgrade gimp-devel-toolsUpgrade pygobject2-debugsourceUpgrade pygobject2-develUpgrade pygtk2-debugsourceUpgrade python2-pycairo-debugsourceUpgrade pygtk2-debuginfoUpgrade python2-cairoUpgrade pygobject2-debuginfoUpgrade pygtk2-develUpgrade gimp-debugsourceUpgrade pygobject2-codegenUpgrade gimp-libs-debuginfoUpgrade gimp-debuginfoUpgrade pygtk2Upgrade python2-cairo-debuginfo | May 18, 2026 | May 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub