RHSA-2026:61587
Vulnerability from csaf_opensuse - Published: 2026-08-31 16:10 - Updated: 2026-10-31 08:57Summary
Red Hat Security Advisory: gimp security update
Severity
Important
Notes
Topic: An update for gimp is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.
Security Fix(es):
* gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090)
* gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304)
* gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301)
* gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow (CVE-2026-18308)
* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302)
* gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305)
* gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303)
* gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306)
* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.
7.8 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute code in the context of the current process.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user's process.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP. This vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required, as the target must open a malicious TIF (Tagged Image File Format) file or visit a malicious page. The issue stems from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before a buffer is allocated. This allows an attacker to execute code within the context of the current process.
7.8 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
8.4 (High)
Affected products
Fixed
24 products, the same list as for
CVE-2026-18301
Threats
Impact
Important
References
65 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for gimp is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090)\n\n* gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304)\n\n* gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301)\n\n* gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow (CVE-2026-18308)\n\n* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302)\n\n* gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305)\n\n* gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303)\n\n* gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306)\n\n* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:61587",
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2496584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496584"
},
{
"category": "external",
"summary": "2520560",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520560"
},
{
"category": "external",
"summary": "2520561",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520561"
},
{
"category": "external",
"summary": "2520576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520576"
},
{
"category": "external",
"summary": "2520579",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520579"
},
{
"category": "external",
"summary": "2520582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520582"
},
{
"category": "external",
"summary": "2520583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520583"
},
{
"category": "external",
"summary": "2520591",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520591"
},
{
"category": "external",
"summary": "2520594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520594"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61587.json"
}
],
"title": "Red Hat Security Advisory: gimp security update",
"tracking": {
"current_release_date": "2026-10-31T08:57:44+00:00",
"generator": {
"date": "2026-10-31T08:57:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:61587",
"initial_release_date": "2026-08-31T16:10:41+00:00",
"revision_history": [
{
"date": "2026-08-31T16:10:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-31T16:10:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-31T08:57:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "gimp-2:3.0.4-4.el9_8.10.src",
"product": {
"name": "gimp-2:3.0.4-4.el9_8.10.src",
"product_id": "gimp-2:3.0.4-4.el9_8.10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp@3.0.4-4.el9_8.10?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "gimp-2:3.0.4-4.el9_8.10.aarch64",
"product": {
"name": "gimp-2:3.0.4-4.el9_8.10.aarch64",
"product_id": "gimp-2:3.0.4-4.el9_8.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp@3.0.4-4.el9_8.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"product": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"product_id": "gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs@3.0.4-4.el9_8.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"product": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"product_id": "gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debugsource@3.0.4-4.el9_8.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product_id": "gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debuginfo@3.0.4-4.el9_8.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product_id": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@3.0.4-4.el9_8.10?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product_id": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs-debuginfo@3.0.4-4.el9_8.10?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "gimp-2:3.0.4-4.el9_8.10.ppc64le",
"product": {
"name": "gimp-2:3.0.4-4.el9_8.10.ppc64le",
"product_id": "gimp-2:3.0.4-4.el9_8.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp@3.0.4-4.el9_8.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"product": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"product_id": "gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs@3.0.4-4.el9_8.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"product": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"product_id": "gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debugsource@3.0.4-4.el9_8.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product_id": "gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debuginfo@3.0.4-4.el9_8.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product_id": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@3.0.4-4.el9_8.10?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product_id": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs-debuginfo@3.0.4-4.el9_8.10?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "gimp-2:3.0.4-4.el9_8.10.x86_64",
"product": {
"name": "gimp-2:3.0.4-4.el9_8.10.x86_64",
"product_id": "gimp-2:3.0.4-4.el9_8.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp@3.0.4-4.el9_8.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"product": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"product_id": "gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs@3.0.4-4.el9_8.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"product": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"product_id": "gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debugsource@3.0.4-4.el9_8.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product_id": "gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debuginfo@3.0.4-4.el9_8.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product_id": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@3.0.4-4.el9_8.10?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product_id": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs-debuginfo@3.0.4-4.el9_8.10?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "gimp-libs-2:3.0.4-4.el9_8.10.i686",
"product": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.i686",
"product_id": "gimp-libs-2:3.0.4-4.el9_8.10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs@3.0.4-4.el9_8.10?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"product": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"product_id": "gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debugsource@3.0.4-4.el9_8.10?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product_id": "gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-debuginfo@3.0.4-4.el9_8.10?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product_id": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@3.0.4-4.el9_8.10?arch=i686\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product_id": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/gimp-libs-debuginfo@3.0.4-4.el9_8.10?arch=i686\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-2:3.0.4-4.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64"
},
"product_reference": "gimp-2:3.0.4-4.el9_8.10.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-2:3.0.4-4.el9_8.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le"
},
"product_reference": "gimp-2:3.0.4-4.el9_8.10.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-2:3.0.4-4.el9_8.10.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src"
},
"product_reference": "gimp-2:3.0.4-4.el9_8.10.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-2:3.0.4-4.el9_8.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64"
},
"product_reference": "gimp-2:3.0.4-4.el9_8.10.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64"
},
"product_reference": "gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686"
},
"product_reference": "gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le"
},
"product_reference": "gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
},
"product_reference": "gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64"
},
"product_reference": "gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686"
},
"product_reference": "gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le"
},
"product_reference": "gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64"
},
"product_reference": "gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64"
},
"product_reference": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686"
},
"product_reference": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le"
},
"product_reference": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
},
"product_reference": "gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64"
},
"product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686"
},
"product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le"
},
"product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-2:3.0.4-4.el9_8.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64"
},
"product_reference": "gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64"
},
"product_reference": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686"
},
"product_reference": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le"
},
"product_reference": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
},
"product_reference": "gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-18301",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-20T16:41:18.578562+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520561"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote code execution via PSD file parsing integer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity for Red Hat because successful exploitation grants arbitrary code execution within the privileges of the active user, justifying a higher severity despite requiring user interaction to open a compromised file. GIMP is an optional desktop application not installed or enabled by default in standard Red Hat Enterprise Linux server environments. Consequently, headless systems and standard server installations are not exposed unless workstation packages have been explicitly installed and utilized to process untrusted graphics.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18301"
},
{
"category": "external",
"summary": "RHBZ#2520561",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520561"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18301"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18301",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18301"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-454/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-454/"
}
],
"release_date": "2026-08-20T16:23:03.121000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid opening untrusted or suspicious PSD files with GIMP. As GIMP is a desktop application that processes untrusted content, exercising caution with the origin of files is a primary defense. No specific configuration or operational controls are available to prevent exploitation without patching.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote code execution via PSD file parsing integer overflow"
},
{
"cve": "CVE-2026-18302",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-08-20T16:43:09.796768+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520579"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute code in the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because opening a maliciously crafted image file can lead to arbitrary code execution with the privileges of the active user session. In Red Hat Enterprise Linux, GIMP is an interactive graphical application typically used in workstation or desktop environments, rather than an automated service or background daemon. Because exploitation requires explicit user interaction to process untrusted files, systems lacking graphical desktop environments or where users do not handle external image assets remain largely insulated from this risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18302"
},
{
"category": "external",
"summary": "RHBZ#2520579",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520579"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18302"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18302",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18302"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1a11636fae53c922fe92273b8f4e33c7a9176",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1a11636fae53c922fe92273b8f4e33c7a9176"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-455/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-455/"
}
],
"release_date": "2026-08-20T16:23:11.929000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should exercise caution and avoid opening TIF image files from untrusted or unknown sources. As a general security practice, only process files from trusted origins.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow"
},
{
"cve": "CVE-2026-18303",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-08-20T16:44:08.354680+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520583"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote code execution via TIF file parsing vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because successful exploitation can allow arbitrary code execution with the privileges of the logged-in user, potentially compromising local files and user data. In Red Hat Enterprise Linux, GIMP is an optional interactive image manipulation utility rather than a background network service, limiting exposure to active user sessions. Triggering the flaw requires a user to manually open an untrusted, specially crafted TIFF image.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18303"
},
{
"category": "external",
"summary": "RHBZ#2520583",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520583"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18303"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18303",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18303"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-456/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-456/"
}
],
"release_date": "2026-08-20T16:23:19.019000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid opening TIF image files from untrusted or unknown sources. As this flaw requires user interaction to open a malicious file, exercising caution with file origins can prevent exploitation.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote code execution via TIF file parsing vulnerability"
},
{
"cve": "CVE-2026-18304",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-20T16:41:26.762587+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520560"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Arbitrary code execution via crafted TIF file parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important impact because successful exploitation allows arbitrary code execution within the context of the active user session. In Red Hat Enterprise Linux, GIMP is an interactive graphical image editor typically installed on desktop workstations rather than headless servers, and it does not operate as a background daemon or listening service. Exploitation is constrained by the requirement for explicit user interaction to open a specially crafted TIFF file, with the overall blast radius limited to the permissions of the targeted local account.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18304"
},
{
"category": "external",
"summary": "RHBZ#2520560",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520560"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18304"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-457/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-457/"
}
],
"release_date": "2026-08-20T16:23:27.514000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "Since this vulnerability requires user interaction with a malicious file, users should exercise caution when opening TIF image files from untrusted sources. To further reduce risk, consider running GIMP within a sandboxed environment, such as a container or Flatpak, to limit the potential impact of a successful exploit.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Arbitrary code execution via crafted TIF file parsing"
},
{
"cve": "CVE-2026-18305",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-20T16:43:47.591846+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important impact because successful exploitation can allow arbitrary code execution with the privileges of the active desktop user, potentially compromising personal files and session data. While exploitation requires user interaction to open a malicious image file, the potential for complete process takeover elevates the severity above Moderate. In standard Red Hat Enterprise Linux environments, GIMP is an optional desktop package rather than a default system service, confining the attack surface primarily to graphical workstation installations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18305"
},
{
"category": "external",
"summary": "RHBZ#2520582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18305"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18305",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18305"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-458/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-458/"
}
],
"release_date": "2026-08-20T16:23:35.093000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid opening TIF image files from untrusted or unknown sources in GIMP. This operational control prevents the application from processing malicious input that could lead to arbitrary code execution.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow"
},
{
"cve": "CVE-2026-18306",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-20T16:45:34.197934+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520591"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user\u0027s process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "On Red Hat Enterprise Linux workstations where desktop image processing tools are deployed, this issue is rated with an Important impact because successfully tricking an end user into opening a maliciously crafted image allows execution of arbitrary commands with full user privileges. Although triggering the condition requires social engineering or direct interaction to open the file, the potential compromise of the local user environment justifies an Important severity rating rather than Moderate. Server installations without graphical desktop packages or interactive image workflows remain unaffected by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18306"
},
{
"category": "external",
"summary": "RHBZ#2520591",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520591"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18306"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/"
}
],
"release_date": "2026-08-20T16:23:42.663000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid opening untrusted SGI image files with GIMP. If GIMP is not required, consider removing the `gimp` package from the system.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow"
},
{
"cve": "CVE-2026-18307",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-08-20T16:46:02.805860+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520594"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because successful exploitation allows arbitrary code execution within the privileges of the targeted user account, though it requires user interaction rather than remote unauthenticated access. In typical Red Hat Enterprise Linux environments, GIMP is an optional desktop application rather than an automated or network-facing service, limiting the attack surface to interactive workstation sessions. Because the defect triggers only when processing untrusted TIFF graphics, exposure remains confined to the user session without providing automatic elevation to root privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18307"
},
{
"category": "external",
"summary": "RHBZ#2520594",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520594"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18307"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18307",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18307"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/"
}
],
"release_date": "2026-08-20T16:23:52.557000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid opening untrusted TIF image files with GIMP. If GIMP is not required, consider removing the package from the system. For systems where GIMP is necessary, exercise caution when handling TIF files from unknown or suspicious sources.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow"
},
{
"cve": "CVE-2026-18308",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-08-20T16:43:00.998998+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520576"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP. This vulnerability allows remote attackers to execute arbitrary code on affected installations. User interaction is required, as the target must open a malicious TIF (Tagged Image File Format) file or visit a malicious page. The issue stems from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before a buffer is allocated. This allows an attacker to execute code within the context of the current process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as having an Important severity impact because successful exploitation can allow arbitrary code execution with the permissions of the local user running the application. Although exploitation requires social engineering to trick an individual into opening a specially crafted TIFF image, GIMP is commonly used in workstation environments to process external graphical assets. In default Red Hat Enterprise Linux server installations, GIMP is not installed or enabled, restricting exposure primarily to desktop deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18308"
},
{
"category": "external",
"summary": "RHBZ#2520576",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520576"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18308"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/d84f8e58f56681a0b4c66129c568cb796725ab9d",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/d84f8e58f56681a0b4c66129c568cb796725ab9d"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-461/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-461/"
}
],
"release_date": "2026-08-20T16:24:00.590000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Remote Code Execution via TIF File Parsing Integer Overflow"
},
{
"cve": "CVE-2026-59090",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-07-02T15:40:19.302000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496584"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GIMP\u0027s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim\u0027s system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in the GIMP image manipulation program. An unsigned integer underflow in the PSD plugin can lead to arbitrary code execution when a user opens a specially crafted `.psd` file. This vulnerability primarily affects desktop environments where GIMP is installed and used to process untrusted image files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59090"
},
{
"category": "external",
"summary": "RHBZ#2496584",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496584"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59090"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59090",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59090"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509",
"url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509"
}
],
"release_date": "2026-06-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T16:10:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61587"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid opening untrusted or suspicious PSD image files with GIMP. As a general security practice, it is recommended to only process image files from trusted sources.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.src",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-debugsource-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-devel-tools-debuginfo-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-2:3.0.4-4.el9_8.10.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.i686",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:gimp-libs-debuginfo-2:3.0.4-4.el9_8.10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.