{"id":"CVE-2017-17785","aliases":["DEBIAN-CVE-2017-17785","DLA-1220-1","DSA-4077-1","EUVD-2017-8936","GHSA-p42j-f8w2-5pxc","MGASA-2018-0030","MGASA-2018-0273","SUSE-SU-2020:0601-1","SUSE-SU-2021:0014-1","SUSE-SU-2021:0015-1","UBUNTU-CVE-2017-17785","USN-3539-1","USN-8057-1","openSUSE-SU-2021:0027-1"],"status":"published","title":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins...","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01149,"percentile":0.67082,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2017-12-20T00:00:00Z","modified":"2026-10-24T10:30:28Z","fixes":[{"ecosystem":"Debian:12","package":"gimp","fixed_in":["2.8.20-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gimp","fixed_in":["2.8.20-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["2.8.20-1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gimp","fixed_in":["2.8.10-0ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","fixed_in":["2.8.16-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","fixed_in":["2.8.22-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","fixed_in":["2.10.18-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","fixed_in":["2.10.30-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","fixed_in":["2.10.36-3ubuntu0.24.04.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.20-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.20-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.20-1.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.2-2+deb7u3"}]}],"versions":["2.8.2-2","2.8.2-2+deb7u1","2.8.2-2+deb7u2"],"bundled":6},{"source":"osv","ecosystem":"Debian:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.14-1+deb8u2"}]}],"versions":["2.8.14-1","2.8.14-1+deb8u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-1+deb9u1"}]}],"versions":["2.8.18-1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.14-4.3.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22-1.2.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP1","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22-5.11.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.18.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.18.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-0ubuntu1.2"}]}],"versions":["2.8.6-1ubuntu1","2.8.6-1ubuntu2","2.8.6-1ubuntu3","2.8.10-0ubuntu1","2.8.10-0ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.16-1ubuntu1.1+esm1"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.10-0ubuntu1.2"}]}],"versions":["2.8.6-1ubuntu1","2.8.6-1ubuntu2","2.8.6-1ubuntu3","2.8.10-0ubuntu1","2.8.10-0ubuntu1.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.16-1ubuntu1.1+esm1"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22-1ubuntu0.1~esm1"}]}],"versions":["2.8.20-1","2.8.20-1.1","2.8.20-2","2.8.22-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.18-1ubuntu0.1+esm1"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1","2.10.18-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-1ubuntu0.1+esm1"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1","2.10.30-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.36-3ubuntu0.24.04.1+esm1"}]}],"versions":["2.10.34-1","2.10.36-1","2.10.36-2","2.10.36-3build2","2.10.36-3build3","2.10.36-3ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22-lp151.5.9.1"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"gimp","product":"gimp"}],"references":[{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=739133","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.debian.org/security/2017/dsa-4077","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/3539-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/12/19/5","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/12/msg00023.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-17785"},{"url":"https://usn.ubuntu.com/3539-1"},{"url":"https://github.com/advisories/GHSA-p42j-f8w2-5pxc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-17785","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0030.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22291","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0273.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22252","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-01/msg00014.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200601-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1073625","tags":["report"]},{"url":"https://bugzilla.suse.com/1073626","tags":["report"]},{"url":"https://bugzilla.suse.com/1073629","tags":["report"]},{"url":"https://bugzilla.suse.com/1161998","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17788","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210014-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1073624","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17784","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210015-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-17785","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3539-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-17785","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8057-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-17784","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17786","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17787","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17788","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-17789","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-2761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-10922","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-14425","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-15059","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKBDGMCM5XJOHFKTACI2CEISBTSKVLD3/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-17785","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2017-12-20T09:00:00Z","modified":"2024-08-05T20:59:17.922Z","updated_at":"2026-11-02T14:33:18.248329Z"}],"euvd":[{"id":"EUVD-2017-8936","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2017-12-20T09:00:00Z","modified":"2024-08-05T20:59:17Z","updated_at":"2026-11-03T02:23:08.488418Z"}],"ghsa":[{"id":"GHSA-p42j-f8w2-5pxc","title":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins...","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2022-05-13T01:03:52Z","modified":"2025-04-20T03:51:13Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:01:57.945283Z"}],"nvd":[{"id":"CVE-2017-17785","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2017-12-20T09:29:00.99Z","modified":"2026-06-17T01:11:38.627Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:11.215487Z"}],"osv":[{"id":"CVE-2017-17785","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2017-12-20T09:29:00.99Z","modified":"2026-10-24T10:30:28.996774639Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.853379Z"},{"id":"DEBIAN-CVE-2017-17785","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2017-12-20T09:29:00.99Z","modified":"2026-09-01T20:03:45.917329508Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-17785","description":"In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.","status":"published","published":"2017-12-20T00:00:00Z","modified":"2026-04-22T11:20:20.40739Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"DLA-1220-1","title":"gimp - security update","status":"published","published":"2017-12-23T00:00:00Z","modified":"2026-03-09T01:01:54.199183Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4077-1","title":"gimp - security update","status":"published","published":"2017-12-30T00:00:00Z","modified":"2026-03-09T01:22:50.839374Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2018-0030","title":"Updated gimp packages fix security vulnerability","description":"Several vulnerabilities were discovered in the GIMP which could result in\ndenial of service (application crash) or potentially the execution of\narbitrary code if malformed files are opened (CVE-2017-17784,\nCVE-2017-17785, CVE-2017-17786, CVE-2017-17787, CVE-2017-17788,\nCVE-2017-17789).\n","status":"published","published":"2018-01-03T10:32:10Z","modified":"2026-04-16T06:23:15.880390175Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0273","title":"Updated gimp packages fix security vulnerabilities","description":"Updated gimp packages fix security vulnerabilities:\n\nSeveral vulnerabilities were discovered in GIMP which could result in denial of\nservice (application crash) or potentially the execution of arbitrary code if\nmalformed files are opened (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786,\nCVE-2017-17787, CVE-2017-17788, CVE-2017-17789).\n\nAlso, the webkit1-based help browser plugin has been disabled in favor of using\nan external browser for the help pages.  This is due to security issues in\nwebkit.\n","status":"published","published":"2018-06-06T18:15:31Z","modified":"2026-04-16T06:22:30.968761594Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2021:0027-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).\n- CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).\n- CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-07T17:24:51Z","modified":"2026-02-04T03:45:24.667436Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2020:0601-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- Fix for crashing due to segmentation fault caused by importing ghostscript files. (bsc#1161998)\n\nSecurity issues fixed:\n\n- CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625)\n- CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626)\n- CVE-2017-17788: Fixed an out-of-bounds read in XCF (bsc#1073629)\n","status":"published","published":"2020-03-06T08:45:43Z","modified":"2026-02-04T03:52:14.378808Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2021:0014-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).\n- CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).\n- CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).\n","status":"published","published":"2021-01-04T10:10:23Z","modified":"2026-02-04T03:28:59.190934Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0015-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2017-17784: Fixed an insufficient string validation for input names (bsc#1073624).\n- CVE-2017-17785: Fixed an heap-based buffer overflow in FLI import (bsc#1073625).\n- CVE-2017-17786: Fixed an out-of-bounds read in TGA (bsc#1073626).\n","status":"published","published":"2021-01-04T10:10:45Z","modified":"2026-02-04T02:22:42.339207Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-3539-1","title":"gimp vulnerabilities","description":"It was discovered that GIMP incorrectly handled certain images. If a user were\ntricked into opening a specially crafted image, an attacker could possibly use\nthis to execute arbitrary code. (CVE-2017-17784, CVE-2017-17785, CVE-2017-17786,\nCVE-2017-17787, CVE-2017-17788, CVE-2017-17789)\n","status":"published","published":"2018-01-22T17:43:33Z","modified":"2026-04-27T15:33:03.55618293Z","updated_at":"2026-11-02T16:58:13.496563Z"},{"id":"USN-8057-1","title":"gimp vulnerabilities","description":"Hanno Böck discovered that GIMP allocated FLI images using only the\ninformation present in the file header, which allowed for a maliciously-\ncrafted file to cause out-of-bounds writes. An attacker could possibly use\nthis issue to cause a denial of service or execute arbitrary code. This\nissue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)\n\nMichael Randrianantenaina discovered that that opening a maliciously\ncrafted FLI file could cause GIMP to index out-of-bounds. An attacker could\npossibly use this issue to cause a denial or service or execute arbitrary\ncode. (CVE-2025-2761)\n\nIt was discovered that opening a maliciously-crafted DCM file could cause\nGIMP to index out-of-bounds. An attacker could possibly use this issue to\ncause a denial of service or execute arbitrary code. (CVE-2025-10922)\n\nIt was discovered that GIMP's JP2 parser did not account for precision when\nallocating an image buffer. An attacker could possibly use this to cause a\ndenial of service or execute arbitrary code when a maliciously crafted file\nis opened. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and\nUbuntu 24.04 LTS. (CVE-2025-14425)\n\nIt was discovered that GIMP's PSP parser erroneously queried the color\nchannels of a greyscale image, which resulted in an invalid memory pointer.\nAn attacker could possibly use this to cause a denial of service or execute\narbitrary code when a maliciously-crafted file is opened. This issue only\naffected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-15059)","status":"published","published":"2026-02-23T20:09:36Z","modified":"2026-06-30T18:15:18.479287897Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}