A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimpUpgrade gimp-libs | Jul 20, 2026 | Jul 16, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-develUpgrade gimp-libsUpgrade gimp-debuginfoUpgrade gimpUpgrade gimp-devel-tools | Aug 5, 2026 | Aug 5, 2026 |
| Debian | — | Upgrade gimp | Aug 30, 2026 | Aug 30, 2026 |
| Redhat_linux | — | Upgrade gimpUpgrade pygtk2-develUpgrade pygtk2-codegenUpgrade gimp-devel-toolsUpgrade gimp-debuginfoUpgrade python2-cairo-develUpgrade pygobject2Upgrade pygobject2-debugsourceUpgrade pygobject2-docUpgrade pygtk2-debugsourceUpgrade pygobject2-debuginfoUpgrade pygobject2-codegenUpgrade python2-cairo-debuginfoUpgrade python2-cairoNo solution existsUpgrade gimp-libsUpgrade gimp-develUpgrade gimp-devel-tools-debuginfoUpgrade pygtk2-debuginfoUpgrade python2-pycairo-debugsourceUpgrade pygtk2-docUpgrade gimp-libs-debuginfoUpgrade pygtk2Upgrade pygobject2-develUpgrade gimp-debugsource | Jul 17, 2026 | Apr 11, 2026 |
| Rocky_linux | — | Upgrade gimp-debuginfoUpgrade python2-cairo-debuginfoUpgrade pygobject2-debugsourceUpgrade gimp-devel-toolsUpgrade pygtk2-debuginfoUpgrade pygobject2-debuginfoUpgrade gimp-develUpgrade pygobject2-develUpgrade gimp-debugsourceUpgrade pygtk2Upgrade pygobject2-docUpgrade python2-cairo-develUpgrade gimp-libsUpgrade pygobject2Upgrade pygtk2-debugsourceUpgrade gimp-devel-tools-debuginfoUpgrade python2-cairoUpgrade pygtk2-codegenUpgrade pygobject2-codegenUpgrade python2-pycairo-debugsourceUpgrade pygtk2-develUpgrade gimpUpgrade gimp-libs-debuginfo | Sep 7, 2026 | Sep 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub