A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pygobject2-develUpgrade gimp-develUpgrade pygtk2Upgrade pygtk2-docUpgrade pygtk2-develUpgrade pygobject2-docUpgrade gimp-libsUpgrade python2-cairo-develUpgrade pygobject2Upgrade gimp-devel-toolsUpgrade gimpUpgrade pygtk2-codegenUpgrade pygobject2-codegenUpgrade python2-cairo | Oct 11, 2026 | Oct 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimpUpgrade gimp-libsUpgrade gimp-debuginfoUpgrade gimp-devel-toolsUpgrade gimp-devel | Oct 19, 2026 | Oct 19, 2026 |
| Debian | — | Upgrade gimp | Sep 21, 2026 | Sep 14, 2026 |
| Oracle_linux | — | Upgrade pygtk2Upgrade gimp-libsUpgrade pygobject2-develUpgrade gimp-develUpgrade pygobject2-docUpgrade python2-cairoUpgrade pygobject2-codegenUpgrade pygtk2-develUpgrade pygtk2-codegenUpgrade python2-cairo-develUpgrade gimp-devel-toolsUpgrade gimpUpgrade pygobject2Upgrade pygtk2-doc | Oct 22, 2026 | Sep 14, 2026 |
| Redhat_linux | — | Upgrade pygtk2-docUpgrade gimp-libs-debuginfoUpgrade pygobject2-debuginfoUpgrade gimpUpgrade pygtk2-develUpgrade pygobject2-debugsourceUpgrade pygtk2-debuginfoUpgrade gimp-debuginfoUpgrade python2-cairo-develUpgrade pygtk2Upgrade pygobject2-codegenUpgrade pygtk2-debugsourceUpgrade pygobject2-develUpgrade gimp-debugsourceUpgrade pygobject2-docUpgrade gimp-devel-tools-debuginfoUpgrade python2-cairoUpgrade python2-cairo-debuginfoNo solution existsUpgrade pygtk2-codegenUpgrade gimp-libsUpgrade pygobject2Upgrade python2-pycairo-debugsourceUpgrade gimp-develUpgrade gimp-devel-tools | Sep 16, 2026 | Sep 14, 2026 |
| Rocky_linux | — | Upgrade pygobject2-debuginfoUpgrade pygtk2-debuginfoUpgrade python2-cairoUpgrade pygobject2-docUpgrade pygtk2Upgrade gimp-libsUpgrade gimp-libs-debuginfoUpgrade pygobject2-develUpgrade gimp-devel-toolsUpgrade pygobject2-codegenUpgrade python2-cairo-debuginfoUpgrade gimp-develUpgrade gimp-debugsourceUpgrade python2-pycairo-debugsourceUpgrade pygtk2-debugsourceUpgrade python2-cairo-develUpgrade gimp-devel-tools-debuginfoUpgrade pygtk2-codegenUpgrade pygobject2-debugsourceUpgrade gimp-debuginfoUpgrade pygtk2-develUpgrade gimpUpgrade pygobject2 | Oct 21, 2026 | Oct 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub