← Back

Gimp

gimp

Vendor: Gimp • 109 CVEs

CVEs (109)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-0733
4Gimp
LittlecmsMozilla+1 more
4Firefox
GimpLittle Cms+1 more
Apr 23, 2026
Mar 23, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbit...Show more
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.Show less
CVE-2009-0723
4Gimp
LittlecmsMozilla+1 more
4Firefox
GimpLittle Cms+1 more
Apr 23, 2026
Mar 23, 2009
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that tri...Show more
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0581
4Gimp
LittlecmsMozilla+1 more
4Firefox
GimpLittle Cms+1 more
Apr 23, 2026
Mar 23, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) v...Show more
Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.Show less
CVE-2006-4519
1Gimp
1Gimp
Apr 23, 2026
Jul 10, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS,...Show more
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.Show less
CVE-2007-2949
2Canonical
Gimp
2Gimp
Ubuntu Linux
Apr 23, 2026
Jul 4, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height valu...Show more
Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrary code via a crafted PSD file that contains a large (1) width or (2) height value.Show less
CVE-2007-3126
1Gimp
1Gimp
Apr 23, 2026
Jun 8, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Gimp before 2.8.22 allows context-dependent attackers to cause a denial of service (crash) via an ICO file with an InfoHeader containing a Height of zero, a similar issue to CVE-2007-2237.
CVE-2007-2356
1Gimp
1Gimp
Apr 23, 2026
Apr 30, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.
CVE-2006-3404
1Gimp
1Gimp
Apr 16, 2026
Jul 6, 2006
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a...Show more
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.Show less
CVE-2005-0654
1Gimp
1Gimp
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.