The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimp-libsUpgrade pygtk2Upgrade pygtk2-docUpgrade python2-cairoUpgrade pygobject2-docUpgrade gimp-develUpgrade pygtk2-develUpgrade pygtk2-codegenUpgrade pygobject2Upgrade pygobject2-codegenUpgrade gimpUpgrade python2-cairo-develUpgrade pygobject2-develUpgrade gimp-devel-tools | Jul 20, 2026 | Jul 16, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-debuginfoUpgrade gimp-develUpgrade gimp-devel-toolsUpgrade gimp-libsUpgrade gimp | Aug 5, 2026 | Aug 5, 2026 |
| Debian | — | Upgrade gimp | Aug 30, 2026 | Aug 30, 2026 |
| Oracle_linux | — | Upgrade gimp-devel-toolsUpgrade pygtk2-codegenUpgrade python2-cairo-develUpgrade pygobject2Upgrade pygobject2-docUpgrade pygobject2-develUpgrade gimp-develUpgrade pygobject2-codegenUpgrade gimpUpgrade pygtk2-docUpgrade python2-cairoUpgrade pygtk2-develUpgrade pygtk2Upgrade gimp-libs | Oct 22, 2026 | Jul 6, 2026 |
| Redhat_linux | — | Upgrade pygobject2-debugsourceUpgrade gimp-devel-toolsUpgrade pygtk2-develUpgrade python2-cairo-develUpgrade pygobject2-docUpgrade gimpUpgrade pygobject2Upgrade gimp-debuginfoUpgrade pygtk2-codegenUpgrade pygtk2-debugsourceUpgrade pygobject2-codegenUpgrade pygobject2-debuginfoUpgrade gimp-debugsourceUpgrade gimp-develUpgrade pygtk2Upgrade pygobject2-develUpgrade python2-cairoNo solution existsUpgrade python2-cairo-debuginfoUpgrade pygtk2-docUpgrade gimp-libs-debuginfoUpgrade python2-pycairo-debugsourceUpgrade pygtk2-debuginfoUpgrade gimp-devel-tools-debuginfoUpgrade gimp-libs | Jul 17, 2026 | Apr 11, 2026 |
| Rocky_linux | — | Upgrade pygobject2-debugsourceUpgrade pygobject2-develUpgrade gimp-debugsourceUpgrade pygtk2-debuginfoUpgrade pygtk2Upgrade gimp-develUpgrade gimp-devel-toolsUpgrade gimp-debuginfoUpgrade python2-cairo-debuginfoUpgrade pygobject2-debuginfoUpgrade pygobject2Upgrade pygtk2-develUpgrade pygtk2-debugsourceUpgrade gimp-devel-tools-debuginfoUpgrade gimp-libs-debuginfoUpgrade python2-cairo-develUpgrade gimpUpgrade pygobject2-docUpgrade pygtk2-codegenUpgrade python2-cairoUpgrade python2-pycairo-debugsourceUpgrade gimp-libsUpgrade pygobject2-codegen | Sep 7, 2026 | Sep 2, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub