GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered

In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c

In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.part.1) via an unexpected bits-per-pixel value for an RGBA…

In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c

In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishandling of UTF-8 data

Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute…

Gimp: gimp: heap buffer overflow in read_channel_data()

Gimp: gimp: double-free in read_layer_block()

GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images

Gimp: gimp: application crashes or information disclosure via crafted icns image files

Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image

Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit

Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow

Gimp: gimp: memory corruption due to integer overflow in ico file handling

Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling

Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check

Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count

Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0

Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader

A flaw was found in GIMP

Gimp: stack vla size underflow denial of service in seattle

Gimp: gimp: denial of service via signed integer overflow in fli file processing

Gimp: gimp: remote code execution via crafted paa file

Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images

Gimp: gimp: denial of service via integer overflow in playstation tim loader

Gimp: gimp: denial of service via specially crafted seattle filmworks file

Gimp: gimp: denial of service via crafted pvr image file

Gimp: gimp: denial of service due to stack buffer overflow in tim image loader

Gimp: gimp: denial of service via crafted psp image file

An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS)

GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string

Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation

Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of…

Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to…

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly…

The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitrary commands via the python-fu-eval command

Integer overflow in the ReadImage function in plug-ins/common/file-gif-load.c in the GIF image format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial…

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code…

Integer overflow in plug-ins/common/psd.c in the Adobe Photoshop PSD plugin in GIMP 2.2.13 and earlier allows remote attackers to cause a denial of service and possibly execute…

fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit…

Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute…

The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter/image-gif.c in CUPS…

Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service…

Multiple integer overflows in the load_image function in file-pcx.c in the Personal Computer Exchange (PCX) plugin in GIMP 2.6.x and earlier allow remote attackers to cause a…

Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted…

Stack-based buffer overflow in the gfig_read_parameter_gimp_rgb function in plug-ins/gfig/gfig-style.c in the GFIG plugin in GIMP 2.6.11 allows user-assisted remote attackers to…