{"id":"CVE-2022-30067","aliases":["ALSA-2022:7978","DEBIAN-CVE-2022-30067","DLA-3659-1","DLA-4431-1","EUVD-2022-35281","GHSA-xhpv-gh4w-v5jf","MGASA-2022-0219","RHSA-2022:7978","RLSA-2022:7978","SUSE-SU-2022:1889-1","SUSE-SU-2022:2063-1","SUSE-SU-2022:2619-1","SUSE-SU-2022:2620-1","UBUNTU-CVE-2022-30067","USN-6521-1","openSUSE-SU-2024:12092-1"],"status":"published","title":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the...","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0076,"percentile":0.55599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2022-05-17T00:00:00Z","modified":"2026-11-03T06:02:30Z","fixes":[{"ecosystem":"Debian:12","package":"gimp","fixed_in":["2.10.32-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gimp","fixed_in":["2.10.32-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["2.10.32-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"gimp","fixed_in":["2.10.24-1.1.mga8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gimp","fixed_in":["2.8.18-9.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gimp","fixed_in":["2.8.18-9.21.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"gimp","fixed_in":["2.10.12-150300.9.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"gimp","fixed_in":["2.10.12-150300.9.3.1","2.10.12-150200.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"gimp","fixed_in":["2.10.12-150300.9.3.1","2.10.12-150200.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"gimp","fixed_in":["2.10.30-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"gimp","fixed_in":["2.10.30-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"gimp","fixed_in":["2.10.30-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gimp","fixed_in":["2.10.18-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gimp","fixed_in":["2.10.30-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gimp","fixed_in":["2.10.30-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.32-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.32-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.32-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.8-2+deb10u1"}]}],"versions":["2.10.8-2"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.22-4+deb11u5"}]}],"versions":["2.10.22-4","2.10.22-4+deb11u1","2.10.22-4+deb11u2","2.10.22-4+deb11u3","2.10.22-4+deb11u4"],"bundled":3},{"source":"osv","ecosystem":"Mageia:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.24-1.1.mga8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.18-9.21.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.12-150300.9.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.12-150300.9.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.12-150300.9.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.12-150200.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.12-150200.3.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1","2.8.16-1ubuntu1.1+esm1","2.8.16-1ubuntu1.1+esm2","2.8.16-1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.20-1","2.8.20-1.1","2.8.20-2","2.8.22-1","2.8.22-1ubuntu0.1~esm1","2.8.22-1ubuntu0.1~esm2","2.8.22-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.18-1ubuntu0.1"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-1ubuntu0.1"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.18-1ubuntu0.1"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-1ubuntu0.1"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-3.1"}]}]}],"products":[{"vendor":"gimp","product":"gimp"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/8120","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/11/msg00015.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30067","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xhpv-gh4w-v5jf"},{"url":"https://access.redhat.com/errata/RHSA-2022:7978","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30067","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32990","tags":["report"]},{"url":"https://bugzilla.redhat.com/2087591","tags":["report"]},{"url":"https://bugzilla.redhat.com/2103202","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7978.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30067.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30067","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0219.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30496","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-May/011204.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087591","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103202","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7978.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30067","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32990","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32990","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7978","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221889-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199653","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30067","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222063-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222619-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222620-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-30067","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6521-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-32990","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-44441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-44442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-44443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-44444","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-30067","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-17T00:00:00Z","modified":"2024-08-03T06:40:47.118Z","updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-35281","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-17T00:00:00Z","modified":"2024-08-03T06:40:47Z","updated_at":"2026-11-03T03:25:36.95433Z"}],"ghsa":[{"id":"GHSA-xhpv-gh4w-v5jf","title":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the...","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-18T00:00:37Z","modified":"2023-11-21T18:30:25Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:55:04.479575Z"}],"nvd":[{"id":"CVE-2022-30067","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-17T17:15:08.407Z","modified":"2026-06-17T04:43:02.5Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:20.264424Z"}],"osv":[{"id":"RHSA-2022:7978","title":"Red Hat Security Advisory: gimp security and enhancement update","status":"published","published":"2024-09-16T07:45:26Z","modified":"2026-06-27T10:16:11Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7978","title":"Moderate: gimp security and enhancement update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: buffer overflow through a crafted XCF file (CVE-2022-30067)\n\n* gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:12:43Z","modified":"2026-02-05T04:45:07.836087Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-30067","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-17T17:15:00Z","modified":"2026-04-22T13:22:21.529592Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2022:7978","title":"Moderate: gimp security and enhancement update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: buffer overflow through a crafted XCF file (CVE-2022-30067)\n* gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:17.944046577Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-30067","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-17T00:00:00Z","modified":"2026-10-28T02:30:42.532566643Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-30067","description":"GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the program will allocate for a huge amount of memory, resulting in insufficient memory or program crash.","status":"published","published":"2022-05-17T17:15:08.407Z","modified":"2026-11-03T06:02:30.702211021Z","updated_at":"2026-11-03T06:44:05.456691Z"},{"id":"DLA-3659-1","title":"gimp - security update","status":"published","published":"2023-11-21T00:00:00Z","modified":"2026-03-09T01:20:13.706999Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DLA-4431-1","title":"gimp - security update","status":"published","published":"2026-01-02T00:00:00Z","modified":"2026-01-02T16:14:57.521861Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2022-0219","title":"Updated gimp packages fix security vulnerability","description":"GIMP 2.10 is vulnerable to Buffer Overflow. Through a crafted XCF file,\nthe program will allocate for a huge amount of memory, resulting in\ninsufficient memory or program crash. (CVE-2022-30067)\n","status":"published","published":"2022-06-03T17:15:11Z","modified":"2026-04-16T04:42:37.897818486Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12092-1","title":"gimp-2.10.30-3.1 on GA media","description":"These are all security issues fixed in the gimp-2.10.30-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:51:26.423486Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1889-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2022-30067: Fixed uncontrolled memory consumption via crafted XCF file (bsc#1199653).\n","status":"published","published":"2022-05-31T08:52:28Z","modified":"2026-02-04T04:33:27.641436Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2063-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2022-30067: Fixed uncontrolled memory consumption via crafted XCF file (bsc#1199653).\n","status":"published","published":"2022-06-13T13:34:55Z","modified":"2026-02-04T02:29:21.590781Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2619-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE_2022-30067: Fixed an out of memory when reading. (bsc#1199653)\n","status":"published","published":"2022-08-01T14:01:42Z","modified":"2026-02-04T02:49:01.41158Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2620-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2022-30067: Fixed uncontrolled memory consumption via crafted XCF file (bsc#1199653).  \n","status":"published","published":"2022-08-01T14:52:41Z","modified":"2026-02-04T03:28:54.077066Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-6521-1","title":"gimp vulnerabilities","description":"It was discovered that GIMP incorrectly handled certain image files. If a\nuser were tricked into opening a specially crafted image, an attacker could\nuse this issue to cause GIMP to crash, resulting in a denial of service, or\npossibly execute arbitrary code.\n","status":"published","published":"2023-11-29T13:17:06Z","modified":"2026-04-27T17:02:15.2891705Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}