A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pygobject2Upgrade gimp-devel-toolsUpgrade pygobject2-codegenUpgrade python2-cairo-develUpgrade pygtk2-develUpgrade pygtk2-codegenUpgrade gimpUpgrade pygtk2-docUpgrade gimp-libsUpgrade gimp-develUpgrade pygobject2-docUpgrade python2-cairoUpgrade pygtk2Upgrade pygobject2-devel | May 14, 2026 | May 12, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-develUpgrade gimp-libsUpgrade gimp-debuginfoUpgrade gimpUpgrade gimp-devel-tools | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade gimpUpgrade pygtk2-docUpgrade gimp-devel-toolsUpgrade pygtk2-develUpgrade python2-cairoUpgrade pygobject2-codegenUpgrade pygobject2Upgrade pygobject2-docUpgrade pygtk2-codegenUpgrade gimp-libsUpgrade python2-cairo-develUpgrade pygobject2-develUpgrade gimp-develUpgrade pygtk2 | May 21, 2026 | Mar 26, 2026 |
| Redhat_linux | — | Upgrade pygtk2-debuginfoUpgrade pygobject2-debuginfoUpgrade pygobject2-debugsourceUpgrade python2-cairoUpgrade pygobject2-codegenUpgrade pygtk2-develUpgrade pygtk2-debugsourceUpgrade pygobject2-docUpgrade pygtk2-docUpgrade gimpUpgrade python2-pycairo-debugsourceUpgrade pygtk2-codegenUpgrade gimp-devel-tools-debuginfoUpgrade pygobject2Upgrade gimp-libs-debuginfoUpgrade gimp-debugsourceUpgrade gimp-libsUpgrade gimp-develUpgrade gimp-debuginfoUpgrade python2-cairo-develUpgrade gimp-devel-toolsNo solution existsUpgrade python2-cairo-debuginfoUpgrade pygtk2Upgrade pygobject2-devel | May 13, 2026 | Mar 26, 2026 |
| Rocky_linux | — | Upgrade pygobject2Upgrade python2-cairo-develUpgrade python2-pycairo-debugsourceUpgrade gimp-devel-toolsUpgrade gimp-devel-tools-debuginfoUpgrade gimp-develUpgrade gimp-libsUpgrade pygobject2-docUpgrade gimpUpgrade pygtk2-debugsourceUpgrade pygtk2-codegenUpgrade pygobject2-debugsourceUpgrade pygobject2-develUpgrade pygtk2-develUpgrade python2-cairoUpgrade pygobject2-debuginfoUpgrade python2-cairo-debuginfoUpgrade pygtk2-debuginfoUpgrade gimp-libs-debuginfoUpgrade gimp-debugsourceUpgrade pygtk2Upgrade pygobject2-codegenUpgrade gimp-debuginfo | May 18, 2026 | May 14, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub