GI
Product
GIMP
113
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 2High 63Medium 21Low 0
Watch
Add GIMP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-59090 | 9.9 | Aug 10 | Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow Affected: 3.3.1 |
| CVE-2018-12713 | 9.1 | Jun 24 | GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file… Affected: through 2.10.2 |
| CVE-2026-2044 | 8.8 | Feb 20 | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2026-0797 | 8.8 | Feb 20 | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.2.0 |
| CVE-2025-5473 | 8.8 | Jun 6 | GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 3.0.4 |
| CVE-2026-92183 New | 7.8 | Oct 21 | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18309 | 7.8 | Aug 20 | GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18308 | 7.8 | Aug 20 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18307 | 7.8 | Aug 20 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18306 | 7.8 | Aug 20 | GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18305 | 7.8 | Aug 20 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18304 | 7.8 | Aug 20 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18303 | 7.8 | Aug 20 | GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18302 | 7.8 | Aug 20 | GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18301 | 7.8 | Aug 20 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-18300 | 7.8 | Aug 20 | GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.2.2 |
| CVE-2026-59091 | 7.8 | Aug 10 | Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file Affected: 3.2.6 |
| CVE-2026-59087 | 7.8 | Aug 10 | Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation Affected: 3.2.4 |
| CVE-2026-66758 | 7.8 | Jul 27 | Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images Affected: 3.0.8; 3.2.4 |
| CVE-2026-58384 | 7.8 | Jul 7 | Gimp: gimp: integer overflow in read_rle_channel() Affected: 3.2.4 |
| CVE-2026-58380 | 7.8 | Jul 6 | Gimp: gimp: stack buffer overflow in pnmscanner_gettoken() Affected: 3.2.4 |
| CVE-2026-2050 | 7.8 | Jun 24 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2026-2049 | 7.8 | Jun 10 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.2.0-RC1 |
| CVE-2026-6384 | 7.8 | Apr 15 | Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing Affected: All versions, or not specified |
| CVE-2026-40915 | 7.8 | Apr 15 | Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader Affected: All versions, or not specified |
| CVE-2026-4154 | 7.8 | Apr 11 | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.0.8 |
| CVE-2026-4153 | 7.8 | Apr 11 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.8 |
| CVE-2026-4152 | 7.8 | Apr 11 | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.8 |
| CVE-2026-4151 | 7.8 | Apr 11 | GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.0.8 |
| CVE-2026-4150 | 7.8 | Apr 11 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.0.8 |
| CVE-2026-2048 | 7.8 | Feb 20 | GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 3.2.0 |
| CVE-2026-2047 | 7.8 | Feb 20 | GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2025-15059 | 7.8 | Jan 23 | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2025-14425 | 7.8 | Dec 23 | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2025-14424 | 7.8 | Dec 23 | GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2025-14423 | 7.8 | Dec 23 | GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2025-14422 | 7.8 | Dec 23 | GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.0.6 |
| CVE-2025-10934 | 7.8 | Oct 29 | GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-10925 | 7.8 | Oct 29 | GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-10924 | 7.8 | Oct 29 | GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-10923 | 7.8 | Oct 29 | GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-10922 | 7.8 | Oct 29 | GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-10921 | 7.8 | Oct 29 | GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-10920 | 7.8 | Oct 29 | GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 3.0.4 |
| CVE-2025-8672 | 7.8 | Aug 11 | MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle Affected: 3.0.2 and later |
| CVE-2025-2761 | 7.8 | Apr 23 | GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability Affected: 2.10.38 |
| CVE-2025-2760 | 7.8 | Apr 23 | GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: 2.10.38 |
| CVE-2023-44444 | 7.8 | May 3 | GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability Affected: before 2.10.36 |
| CVE-2023-44443 | 7.8 | May 3 | GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability Affected: before 2.10.36 |
| CVE-2023-44442 | 7.8 | May 3 | GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability Affected: before 2.10.36 |
