Skip to content

CVE-2023-44441

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

7.8 HighFix available

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

27.3%Up 27.3 points since May 3, 2024

What each source reports

CVE List Score used 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: CVE-2023-44441
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

EUVDEUVD-2023-48781 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: EUVD-2023-48781
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-mh5h-w46h-67mh 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22093.

Record: GHSA-mh5h-w46h-67mh
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

NVD 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: CVE-2023-44441
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

OSVALPINE-CVE-2023-44441 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: ALPINE-CVE-2023-44441
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSV 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: CVE-2023-44441
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

Show 19 moreShow less

OSVDEBIAN-CVE-2023-44441 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: DEBIAN-CVE-2023-44441
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:0675 7.8

Red Hat Security Advisory: gimp security update

Record: RHSA-2024:0675
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:0702 7.8

Red Hat Security Advisory: gimp security update

Record: RHSA-2024:0702
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:0716 7.8

Red Hat Security Advisory: gimp security update

Record: RHSA-2024:0716
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:3617 7.8

Red Hat Security Advisory: gimp security update

Record: RHSA-2025:3617
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:3629 7.8

Red Hat Security Advisory: gimp security update

Record: RHSA-2025:3629
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:7417 7.8

Red Hat Security Advisory: gimp security update

Record: RHSA-2025:7417
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2024:0675 7.8

Important: gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: dds buffer overflow RCE (CVE-2023-44441)
gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp integer overflow RCE (CVE-2023-44443)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:0675
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:3617 7.8

Important: gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: dds buffer overflow RCE (CVE-2023-44441)
gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp integer overflow RCE (CVE-2023-44443)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:3617
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2025:7417 7.8

Important: gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: dds buffer overflow RCE (CVE-2023-44441)
gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp integer overflow RCE (CVE-2023-44443)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2025:7417
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-44441 7.8

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.

Record: UBUNTU-CVE-2023-44441
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2024:0675 No score

Important: gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: dds buffer overflow RCE (CVE-2023-44441)
gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp integer overflow RCE (CVE-2023-44443)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2024:0675
Updated: 2026-11-02

OSVALSA-2025:3617 No score

Important: gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: dds buffer overflow RCE (CVE-2023-44441)
gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp integer overflow RCE (CVE-2023-44443)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:3617
Updated: 2026-11-02

OSVALSA-2025:7417 No score

Important: gimp security update

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

gimp: dds buffer overflow RCE (CVE-2023-44441)
gimp: PSD buffer overflow RCE (CVE-2023-44442)
gimp: psp integer overflow RCE (CVE-2023-44443)
gimp: psp off-by-one RCE (CVE-2023-44444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:7417
Updated: 2026-11-02

OSVCLSA-2025-1757663183 No score

gimp: Fix of CVE-2023-44441

CVE-2023-44441: fix heap-based buffer overflow vulnerability in DDS file parsing

Record: CLSA-2025-1757663183
Updated: 2026-11-02

OSVMGASA-2023-0346 No score

Updated gimp packages fix security vulnerabilities

GIMP has been updated to version 2.10.36 to fix several security issues. CVE-2023-44441: GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44442: GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-44443: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability CVE-2023-44444: GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

Record: MGASA-2023-0346
Updated: 2026-11-02

OSVSUSE-SU-2023:4692-1 No score

Security update for gimp

This update for gimp fixes the following issues:

CVE-2023-44441: Fixed Heap-based Buffer Overflow in DDS (bsc#1217160).
CVE-2023-44442: Fixed Heap-based Buffer Overflow in PSD (bsc#1217161).
CVE-2023-44443: Fixed Integer Overflow in PSP (bsc#1217162).
CVE-2023-44444: Fixed Off-By-One om PSP (bsc#1217163).

Record: SUSE-SU-2023:4692-1
Updated: 2026-11-02

OSVUSN-6521-1 No score

gimp vulnerabilities

It was discovered that GIMP incorrectly handled certain image files. If a user were tricked into opening a specially crafted image, an attacker could use this issue to cause GIMP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record: USN-6521-1
Updated: 2026-11-02

OSVUSN-7209-1 No score

gimp-dds vulnerabilities

Jacob Boerema discovered that the GIMP DDS Plugin incorrectly processed DDS files due to a memory issue. An attacker could exploit this through a specifically crafted DDS file to cause GIMP to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record: USN-7209-1
Updated: 2026-11-02

Affected products

gimp

Affected packages

Affected packages
Package	Affected	Fixed
`gimp` Alpine:v3.19	before 2.10.36-r0	2.10.36-r0
`gimp` Alpine:v3.20	before 2.10.36-r0	2.10.36-r0
`gimp` Alpine:v3.21	before 2.10.36-r0	2.10.36-r0
`gimp` Alpine:v3.22	before 2.10.36-r0	2.10.36-r0
`gimp` Alpine:v3.23	before 2.10.36-r0	2.10.36-r0
`gimp` Alpine:v3.24	before 2.10.36-r0	2.10.36-r0
`gimp` AlmaLinux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp-libs` AlmaLinux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp` AlmaLinux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp-libs` AlmaLinux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5

Show 67 moreShow less

Affected packages
Package	Affected	Fixed
`gimp` AlmaLinux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp-libs` AlmaLinux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp` TuxCare:AlmaLinux:9.2	before 2:2.99.8-3.el9.tuxcare.els1	2:2.99.8-3.el9.tuxcare.els1
`gimp-devel` TuxCare:AlmaLinux:9.2	before 2:2.99.8-3.el9.tuxcare.els1	2:2.99.8-3.el9.tuxcare.els1
`gimp-devel-tools` TuxCare:AlmaLinux:9.2	before 2:2.99.8-3.el9.tuxcare.els1	2:2.99.8-3.el9.tuxcare.els1
`gimp-libs` TuxCare:AlmaLinux:9.2	before 2:2.99.8-3.el9.tuxcare.els1	2:2.99.8-3.el9.tuxcare.els1
`gimp` Debian:12	before 2.10.34-1+deb12u1, plus listed versions 2.10.34-1	2.10.34-1+deb12u1
`gimp` Debian:13	before 2.10.36-1	2.10.36-1
`gimp` Debian:14	before 2.10.36-1	2.10.36-1
`gimp-dds` Debian:10	before 3.0.1-1+deb10u1, plus listed versions 3.0.1-1	3.0.1-1+deb10u1
`gimp` Debian:11 From an advisory covering 4 CVEs	before 2.10.22-4+deb11u1, plus listed versions 2.10.22-4	2.10.22-4+deb11u1
`gimp` Debian:12 From an advisory covering 4 CVEs	before 2.10.34-1+deb12u1, plus listed versions 2.10.34-1	2.10.34-1+deb12u1
`gimp` Mageia:8 From an advisory covering 4 CVEs	before 2.10.36-1.mga8	2.10.36-1.mga8
`gegl` Mageia:8 From an advisory covering 4 CVEs	before 0.4.38-1.mga8	0.4.38-1.mga8
`gimp` Mageia:9 From an advisory covering 4 CVEs	before 2.10.36-1.mga9	2.10.36-1.mga9
`gimp` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp-devel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp-libs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp` Red Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_2	2:2.99.8-4.el9_2
`gimp-debuginfo` Red Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_2	2:2.99.8-4.el9_2
`gimp-debugsource` Red Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_2	2:2.99.8-4.el9_2
`gimp-devel-tools-debuginfo` Red Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_2	2:2.99.8-4.el9_2
`gimp-libs` Red Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_2	2:2.99.8-4.el9_2
`gimp-libs-debuginfo` Red Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_2	2:2.99.8-4.el9_2
`gimp` Red Hat:rhel_eus:9.0::appstream From an advisory covering 4 CVEs	before 2:2.99.8-3.el9_0	2:2.99.8-3.el9_0
`gimp-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 4 CVEs	before 2:2.99.8-3.el9_0	2:2.99.8-3.el9_0
`gimp-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 4 CVEs	before 2:2.99.8-3.el9_0	2:2.99.8-3.el9_0
`gimp-devel-tools-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 4 CVEs	before 2:2.99.8-3.el9_0	2:2.99.8-3.el9_0
`gimp-libs` Red Hat:rhel_eus:9.0::appstream From an advisory covering 4 CVEs	before 2:2.99.8-3.el9_0	2:2.99.8-3.el9_0
`gimp-libs-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 4 CVEs	before 2:2.99.8-3.el9_0	2:2.99.8-3.el9_0
`gimp` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp-devel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp-libs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_5	2:2.99.8-4.el9_5
`gimp` Red Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_4	2:2.99.8-4.el9_4
`gimp-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_4	2:2.99.8-4.el9_4
`gimp-debugsource` Red Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_4	2:2.99.8-4.el9_4
`gimp-devel-tools-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_4	2:2.99.8-4.el9_4
`gimp-libs` Red Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_4	2:2.99.8-4.el9_4
`gimp-libs-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_4	2:2.99.8-4.el9_4
`gimp` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp-devel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp-libs` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp-libs-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp` Rocky Linux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_6	2:2.99.8-4.el9_6
`gimp` Rocky Linux:9 From an advisory covering 4 CVEs	before 2:2.99.8-4.el9_3	2:2.99.8-4.el9_3
`gimp` SUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 4 CVEs	before 2.10.30-150400.3.11.1	2.10.30-150400.3.11.1
`gimp` SUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 4 CVEs	before 2.10.30-150400.3.11.1	2.10.30-150400.3.11.1
`gimp` SUSE:Linux Enterprise Workstation Extension 15 SP4 From an advisory covering 4 CVEs	before 2.10.30-150400.3.11.1	2.10.30-150400.3.11.1
`gimp` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 4 CVEs	before 2.10.30-150400.3.11.1	2.10.30-150400.3.11.1
`gimp` openSUSE:Leap 15.4 From an advisory covering 4 CVEs	before 2.10.30-150400.3.11.1	2.10.30-150400.3.11.1
`gimp` openSUSE:Leap 15.5 From an advisory covering 4 CVEs	before 2.10.30-150400.3.11.1	2.10.30-150400.3.11.1
`gimp-dds` Ubuntu:Pro:16.04:LTS	before 3.0.1-1+deb10u1build0.16.04.1~esm1, plus listed versions 3.0.1-1	3.0.1-1+deb10u1build0.16.04.1~esm1
`gimp-dds` Ubuntu:Pro:18.04:LTS	before 3.0.1-1+deb10u1build0.18.04.1~esm1, plus listed versions 3.0.1-13.0.1-1build1	3.0.1-1+deb10u1build0.18.04.1~esm1
`gimp` Ubuntu:20.04:LTS	before 2.10.18-1ubuntu0.1, plus listed versions 2.10.8-22.10.14-22.10.14-2build12.10.14-2ubuntu12.10.14-32.10.18-1	2.10.18-1ubuntu0.1
`gimp-dds` Ubuntu:20.04:LTS	before 3.0.1-1+deb10u1build0.20.04.1, plus listed versions 3.0.1-1build1	3.0.1-1+deb10u1build0.20.04.1
`gimp` Ubuntu:22.04:LTS	before 2.10.30-1ubuntu0.1, plus listed versions 2.10.24-22.10.28-12.10.30-12.10.30-1build1	2.10.30-1ubuntu0.1
`gimp-dds` Ubuntu:22.04:LTS	before 3.0.1-1+deb10u1build0.22.04.1, plus listed versions 3.0.1-1build1	3.0.1-1+deb10u1build0.22.04.1
`gimp` Ubuntu:20.04:LTS From an advisory covering 6 CVEs	before 2.10.18-1ubuntu0.1, plus listed versions 2.10.8-22.10.14-22.10.14-2build12.10.14-2ubuntu12.10.14-32.10.18-1	2.10.18-1ubuntu0.1
`gimp` Ubuntu:22.04:LTS From an advisory covering 6 CVEs	before 2.10.30-1ubuntu0.1, plus listed versions 2.10.24-22.10.28-12.10.30-12.10.30-1build1	2.10.30-1ubuntu0.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-44441 is a high vulnerability (CVSS 7.8) in Gimp, published November 15, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.3%, the 98th percentile. Fixed in gimp 2.10.36-r0.

References

Show 67 moreShow less