{"id":"CVE-2026-90947","aliases":["ALSA-2026:75575","ALSA-2026:84744","CLSA-2026-1791479721","CLSA-2026-1791539516","DEBIAN-CVE-2026-90947","EUVD-2026-77593","GHSA-pcjr-j975-j4c4","MGASA-2026-0578","OESA-2026-4223","RHSA-2026:75575","RHSA-2026:84744","RLSA-2026:84744","SUSE-SU-2026:4409-1","UBUNTU-CVE-2026-90947","openSUSE-SU-2026:21959-1"],"status":"published","title":"Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00133,"percentile":0.0288,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-09-14T15:15:14Z","modified":"2026-11-11T13:03:41Z","fixes":[{"ecosystem":"Debian:13","package":"gimp","fixed_in":["3.0.4-3+deb13u11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["3.2.6-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4306+69430cd5.9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4306+69430cd5.9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4306+69430cd5.9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4306+69430cd5.9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4267+35168c80"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4267+35168c80"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4267+35168c80"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4267+35168c80"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+4267+35168c80"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+4267+35168c80"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els22"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.34-1","2.10.34-1+deb12u1","2.10.34-1+deb12u10","2.10.34-1+deb12u2","2.10.34-1+deb12u3","2.10.34-1+deb12u4","2.10.34-1+deb12u5","2.10.34-1+deb12u6","2.10.34-1+deb12u7","2.10.34-1+deb12u8","2.10.34-1+deb12u9","2.10.36-1","2.10.36-2","2.10.36-3","2.10.38-1","2.10.38-2","2.99.10-1","2.99.12-1","2.99.12-2","2.99.14-1","2.99.14-2","2.99.16-1","2.99.16-2","2.99.18-1","3.0.0-1","3.0.0-2","3.0.0~RC1-1","3.0.0~RC1-3","3.0.0~RC1-4","3.0.0~RC2-1","3.0.0~RC3-1","3.0.2-1","3.0.2-2","3.0.2-3","3.0.2-3.1","3.0.4-1","3.0.4-2","3.0.4-3","3.0.4-4","3.0.4-5","3.0.4-6","3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0-1","3.2.0~RC2-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1","3.2.2-1","3.2.4-1","3.2.4-2","3.2.4-3","3.2.6-1","3.2.8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-3+deb13u11"}]}],"versions":["3.0.4-3","3.0.4-3+deb13u1","3.0.4-3+deb13u10","3.0.4-3+deb13u2","3.0.4-3+deb13u3","3.0.4-3+deb13u4","3.0.4-3+deb13u5","3.0.4-3+deb13u6","3.0.4-3+deb13u7","3.0.4-3+deb13u8","3.0.4-3+deb13u9"]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.6-1"}]}],"versions":["3.0.4-3","3.0.4-4","3.0.4-5","3.0.4-6","3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0-1","3.2.0~RC2-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1","3.2.2-1","3.2.4-1","3.2.4-2","3.2.4-3"]},{"source":"osv","ecosystem":"Mageia:10","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.8-1.mga10"}]}],"bundled":28},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.6-1.oe2403sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.14"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40075+a21479b4.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1927+52edb5a0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40033+6fd27379.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40134+eab491b1.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+1927+52edb5a0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+1723+9bc93544"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+1927+52edb5a0"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.79.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.79.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1","2.8.16-1ubuntu1.1+esm1","2.8.16-1ubuntu1.1+esm2","2.8.16-1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.20-1","2.8.20-1.1","2.8.20-2","2.8.22-1","2.8.22-1ubuntu0.1~esm1","2.8.22-1ubuntu0.1~esm2","2.8.22-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1","2.10.18-1ubuntu0.1","2.10.18-1ubuntu0.1+esm1","2.10.18-1ubuntu0.1+esm2","2.10.18-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1","2.10.30-1ubuntu0.1","2.10.30-1ubuntu0.1+esm1","2.10.30-1ubuntu0.1+esm2","2.10.30-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.34-1","2.10.36-1","2.10.36-2","2.10.36-3build2","2.10.36-3build3","2.10.36-3ubuntu0.24.04.1","2.10.36-3ubuntu0.24.04.1+esm1","2.10.36-3ubuntu0.24.04.1+esm2","2.10.36-3ubuntu0.24.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.2-1","3.2.4-1","3.2.4-2","3.2.4-3","3.2.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1","3.2.0-1","3.2.2-1","3.2.2-1ubuntu0.26.04.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-bp160.10.1"}]}],"bundled":11}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:75575","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:84744","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:93589","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:98462","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90947","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533005","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16682","tags":["article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90947","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pcjr-j975-j4c4"},{"url":"https://access.redhat.com/security/cve/CVE-2026-90948","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92248","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97185","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533005","tags":["report"]},{"url":"https://bugzilla.redhat.com/2533008","tags":["report"]},{"url":"https://bugzilla.redhat.com/2534282","tags":["report"]},{"url":"https://bugzilla.redhat.com/2539980","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-75575.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-84744.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791479721.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44441","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44442","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92248","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97185","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1791539516.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-90947","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0578.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36194","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LUXP5VNBOZ64AC65YKLO3MBCA4XXR3YS/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00381.html","tags":["web"]},{"url":"https://www.gimp.org/news/2026/09/10/gimp-3-2-6-released/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/AXAWJZC67JFATQTC4ZYX23XZMXR7SZXO/","tags":["web"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00421.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/C7EXHOBQOGSI72FUDZQDNV4DYSYL6PXM/","tags":["web"]},{"url":"https://www.gimp.org/news/2026/11/02/gimp-3-2-8-released/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82330","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539980","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_75575.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90947","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90948","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16742","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92248","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16775","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97185","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/work_items/16788","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84744.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:84744","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264409-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276230","tags":["report"]},{"url":"https://bugzilla.suse.com/1276231","tags":["report"]},{"url":"https://bugzilla.suse.com/1276232","tags":["report"]},{"url":"https://bugzilla.suse.com/1276233","tags":["report"]},{"url":"https://bugzilla.suse.com/1276234","tags":["report"]},{"url":"https://bugzilla.suse.com/1276235","tags":["report"]},{"url":"https://bugzilla.suse.com/1276236","tags":["report"]},{"url":"https://bugzilla.suse.com/1280511","tags":["report"]},{"url":"https://bugzilla.suse.com/1280512","tags":["report"]},{"url":"https://bugzilla.suse.com/1280739","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90947","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92248","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-90947","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2960","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1276237","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18308","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-90947","title":"Gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","status":"published","published":"2026-09-14T15:15:14.63Z","modified":"2026-11-11T13:03:41.563Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-11T14:28:43.346708Z"}],"euvd":[{"id":"EUVD-2026-77593","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","status":"published","published":"2026-09-14T15:15:14Z","modified":"2026-11-11T13:03:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-11T14:28:59.314266Z"}],"ghsa":[{"id":"GHSA-pcjr-j975-j4c4","title":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting...","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","status":"published","published":"2026-09-14T18:31:21Z","modified":"2026-11-11T15:31:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-11T15:34:48.112751Z"}],"nvd":[{"id":"CVE-2026-90947","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","status":"published","published":"2026-09-14T16:17:41.86Z","modified":"2026-11-11T13:17:32.87Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-11T15:25:15.031694Z"}],"osv":[{"id":"DEBIAN-CVE-2026-90947","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","status":"published","published":"2026-09-14T16:17:41.86Z","modified":"2026-11-12T09:47:31.738144142Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-12T10:16:30.501395Z"},{"id":"OESA-2026-4223","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image file, the plugin does not properly validate the used_clrs (palette count) parameter. This incorrect validation leads to improper memory bounds checking, resulting in a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of heap memory contents.(CVE-2026-82328)\n\nA flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ (compressed) decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of heap memory contents.(CVE-2026-82330)\n\nA flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.(CVE-2026-90947)","status":"published","published":"2026-09-30T13:47:45Z","modified":"2026-10-01T02:00:07.827665581Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"RHSA-2026:75575","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-10-06T10:18:55Z","modified":"2026-10-20T10:15:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:84744","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-10-20T10:17:47Z","modified":"2026-10-20T10:32:22.869168359Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:84744","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947)\n\n* gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948)\n\n* gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248)\n\n* gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-10-20T00:01:19.614184Z","modified":"2026-10-20T00:30:02.685799527Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-90947","description":"A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.","status":"published","published":"2026-09-14T16:17:00Z","modified":"2026-10-17T13:01:16.967586058Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:57:40.980117Z"},{"id":"ALSA-2026:75575","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947)\n  * gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948)\n  * gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248)\n  * gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-05T00:00:00Z","modified":"2026-10-29T11:32:37.541816681Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:84744","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947)\n  * gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948)\n  * gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248)\n  * gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-10-19T00:00:00Z","modified":"2026-10-29T11:02:25.351410425Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"CLSA-2026-1791479721","title":"gimp: Fix of 10 CVEs","description":"- CVE-2026-90948: compute the ICO PNG frame size and the image buffer size\n  with g_size_checked_mul () in ico_read_png () and ico_load_image ()\n- CVE-2026-90947: clamp the preset \"Number of lights\" to NUM_LIGHTS in the\n  Lighting Effects load_preset_response ()\n- CVE-2026-92248: bound the PSD JPEG thumbnail dimensions and compute its\n  buffer size with g_size_checked_mul () in load_resource_1033 ()\n- CVE-2026-97185: reject out-of-range vector indices in the GIMPressionist\n  preset loader set_orient_vector () and set_size_vector ()","status":"published","published":"2026-10-20T16:38:50Z","modified":"2026-10-26T09:43:36.033812904Z","updated_at":"2026-11-02T15:43:49.016976Z"},{"id":"CLSA-2026-1791539516","title":"gimp: Fix of 4 CVEs","description":"- CVE-2026-90948: compute the ICO PNG frame size and the image buffer size\n  with g_size_checked_mul () in ico_read_png () and ico_load_image ()\n- CVE-2026-90947: clamp the preset \"Number of lights\" to NUM_LIGHTS in the\n  Lighting Effects load_preset_response ()\n- CVE-2026-92248: bound the PSD JPEG thumbnail dimensions and compute its\n  buffer size with g_size_checked_mul () in load_resource_1033 ()\n- CVE-2026-97185: reject out-of-range vector indices in the GIMPressionist\n  preset loader set_orient_vector () and set_size_vector ()","status":"published","published":"2026-10-09T09:52:09Z","modified":"2026-10-26T09:43:55.345273066Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"MGASA-2026-0578","title":"Updated gimp packages fix security vulnerabilities","description":"This update to v. 3.2.8 fixes several security issues.\n","status":"published","published":"2026-11-07T04:34:18Z","modified":"2026-11-07T04:45:03.545119581Z","updated_at":"2026-11-07T05:09:09.270904Z"},{"id":"openSUSE-SU-2026:21959-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\nChanges in gimp:\n\n- CVE-2026-18304: GIMP TIF File Parsing Integer Overflow Remote\n  Code Execution Vulnerability (bsc#1276233)\n- CVE-2026-18301: GIMP PSD File Parsing Integer Overflow Remote\n  Code Execution Vulnerability (bsc#1276230)\n- CVE-2026-18307: GIMP TIF File Parsing Heap-based Buffer Overflow\n  Remote Code Execution Vulnerability (bsc#1276236)\n- CVE-2026-18303: GIMP TIF File Parsing Stack-based Buffer Overflow\n  Remote Code Execution Vulnerability (bsc#1276232)\n- CVE-2026-18308: GIMP TIF File Parsing Integer Overflow Remote\n  Code Execution Vulnerability (bsc#1276237)\n- CVE-2026-18306: GIMP SGI File Parsing Integer Overflow Remote\n  Code Execution Vulnerability (bsc#1276235)\n- CVE-2026-18305: GIMP TIF File Parsing Integer Overflow Remote\n  Code Execution Vulnerability (bsc#1276234)\n- CVE-2026-18302: GIMP TIF File Parsing Heap-based Buffer Overflow\n  Remote Code Execution Vulnerability (bsc#1276231)\n- CVE-2026-90947: out-of-bounds write in the lighting effects\n  plugin when processing a crafted preset file due to improper\n  validation of the number of light sources (bsc#1280511)\n- CVE-2026-90948: When processing an ICO file containing an\n  embedded PNG image, an integer overflow can occur during the\n  calculation of the required buffer size (bsc#1280512)\n- CVE-2026-92248: When generating a thumbnail preview for a\n  specially crafted PSD (Photoshop Document) image file, an integer\n  overflow occurs during the multiplication of values from an\n  embedded JPEG header (bsc#1280739)\n","status":"published","published":"2026-09-24T14:47:42Z","modified":"2026-09-25T17:30:04.189130779Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:4409-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230).\n- CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231).\n- CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow (bsc#1276232).\n- CVE-2026-18304: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233).\n- CVE-2026-18305: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276234).\n- CVE-2026-18306: SGI File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276235).\n- CVE-2026-18307: File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1276236).\n- CVE-2026-90947: out-of-bounds write in the lighting effects plugin when processing a crafted preset file due to\n  improper validation of the number of light sources (bsc#1280511).\n- CVE-2026-90948: heap buffer overflow in the ICO loader when processing ICO files with embedded PNG images due to an\n  integer overflow during calculation of buffer sizes (bsc#1280512).\n- CVE-2026-92248: integer overflow when generating a thumbnail preview for a PSD file can lead to a heap buffer overflow\n  (bsc#1280739).\n","status":"published","published":"2026-10-01T07:07:35Z","modified":"2026-10-01T17:30:06.28787464Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}