A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pygtk2-docUpgrade pygtk2-develUpgrade gimpUpgrade gimp-devel-toolsUpgrade pygobject2Upgrade python2-cairoUpgrade pygobject2-codegenUpgrade pygobject2-docUpgrade pygtk2Upgrade gimp-develUpgrade pygobject2-develUpgrade gimp-libsUpgrade pygtk2-codegenUpgrade python2-cairo-devel | Oct 11, 2026 | Oct 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-libsUpgrade gimp-devel-toolsUpgrade gimp-develUpgrade gimp-debuginfoUpgrade gimp | Oct 19, 2026 | Oct 19, 2026 |
| Oracle_linux | — | Upgrade gimpUpgrade python2-cairoUpgrade pygtk2-codegenUpgrade pygtk2-docUpgrade pygobject2Upgrade pygtk2-develUpgrade gimp-libsUpgrade pygobject2-docUpgrade pygobject2-codegenUpgrade pygtk2Upgrade pygobject2-develUpgrade gimp-develUpgrade python2-cairo-develUpgrade gimp-devel-tools | Oct 22, 2026 | Sep 24, 2026 |
| Redhat_linux | — | Upgrade pygtk2-docUpgrade gimpUpgrade pygobject2-codegenUpgrade pygtk2-debugsourceUpgrade gimp-debuginfoUpgrade pygobject2-debugsourceUpgrade python2-cairoUpgrade gimp-devel-tools-debuginfoUpgrade pygtk2-codegenUpgrade gimp-devel-toolsUpgrade pygobject2Upgrade pygtk2-develUpgrade gimp-libsUpgrade python2-cairo-develUpgrade gimp-develUpgrade pygobject2-develUpgrade python2-cairo-debuginfoUpgrade pygobject2-docUpgrade pygtk2-debuginfoNo solution existsUpgrade python2-pycairo-debugsourceUpgrade gimp-debugsourceUpgrade gimp-libs-debuginfoUpgrade pygtk2Upgrade pygobject2-debuginfo | Sep 25, 2026 | Sep 24, 2026 |
| Rocky_linux | — | Upgrade pygobject2-codegenUpgrade pygobject2-debuginfoUpgrade pygtk2-develUpgrade pygtk2-debugsourceUpgrade gimpUpgrade pygtk2-codegenUpgrade python2-cairo-develUpgrade pygobject2-docUpgrade pygobject2-develUpgrade gimp-devel-toolsUpgrade python2-pycairo-debugsourceUpgrade pygobject2-debugsourceUpgrade gimp-develUpgrade pygobject2Upgrade pygtk2Upgrade python2-cairoUpgrade gimp-debugsourceUpgrade gimp-libsUpgrade gimp-debuginfoUpgrade pygtk2-debuginfoUpgrade gimp-libs-debuginfoUpgrade gimp-devel-tools-debuginfoUpgrade python2-cairo-debuginfo | Oct 21, 2026 | Oct 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub