RHSA-2026:93589

Vulnerability from csaf_redhat - Published: 2026-11-02 09:58 - Updated: 2026-11-05 19:30
Summary
Red Hat Security Advisory: gimp security update
Severity
Important
Notes
Topic: An update for gimp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169) * gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379) * gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380) * gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090) * gimp: gimp: Integer overflow in read_RLE_channel() (CVE-2026-58384) * gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307) * gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947) * gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948) * gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248) * gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-18301

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-18302

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute code in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18303

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18304

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18305

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18306

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user's process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18307

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Moderate
CVE-2026-58379

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-122 - Heap-based Buffer Overflow
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-58380

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-193 - Off-by-one Error
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Moderate
CVE-2026-58384

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-59090

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.

8.4 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
CWE-191 - Integer Underflow (Wrap or Wraparound)
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-66758

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-90947

A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-90948

A flaw was found in GIMP's ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-92248

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a heap-based buffer overflow when the image data is decoded. This buffer overflow corrupts adjacent heap objects, allowing for a controlled memory write that can result in an application crash or arbitrary code execution.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-97185

A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:93589 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2461725 external
https://bugzilla.redhat.com/show_bug.cgi?id=2495997 external
https://bugzilla.redhat.com/show_bug.cgi?id=2496135 external
https://bugzilla.redhat.com/show_bug.cgi?id=2496584 external
https://bugzilla.redhat.com/show_bug.cgi?id=2497431 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507475 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520560 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520561 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520579 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520582 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520583 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520591 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520594 external
https://bugzilla.redhat.com/show_bug.cgi?id=2533005 external
https://bugzilla.redhat.com/show_bug.cgi?id=2533008 external
https://bugzilla.redhat.com/show_bug.cgi?id=2534282 external
https://bugzilla.redhat.com/show_bug.cgi?id=2539980 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-18301 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520561 external
https://www.cve.org/CVERecord?id=CVE-2026-18301 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18301 external
https://gitlab.gnome.org/GNOME/gimp/-/merge_reque… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18302 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520579 external
https://www.cve.org/CVERecord?id=CVE-2026-18302 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18302 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18303 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520583 external
https://www.cve.org/CVERecord?id=CVE-2026-18303 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18303 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/5633… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18304 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520560 external
https://www.cve.org/CVERecord?id=CVE-2026-18304 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18304 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18305 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520582 external
https://www.cve.org/CVERecord?id=CVE-2026-18305 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18305 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18306 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520591 external
https://www.cve.org/CVERecord?id=CVE-2026-18306 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18306 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/7653… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18307 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520594 external
https://www.cve.org/CVERecord?id=CVE-2026-18307 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18307 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/bace… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-42169 self
https://bugzilla.redhat.com/show_bug.cgi?id=2461725 external
https://www.cve.org/CVERecord?id=CVE-2026-42169 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42169 external
https://access.redhat.com/security/cve/CVE-2026-58379 self
https://bugzilla.redhat.com/show_bug.cgi?id=2495997 external
https://www.cve.org/CVERecord?id=CVE-2026-58379 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58379 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16205 external
https://access.redhat.com/security/cve/CVE-2026-58380 self
https://bugzilla.redhat.com/show_bug.cgi?id=2496135 external
https://www.cve.org/CVERecord?id=CVE-2026-58380 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58380 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16206 external
https://access.redhat.com/security/cve/CVE-2026-58384 self
https://bugzilla.redhat.com/show_bug.cgi?id=2497431 external
https://www.cve.org/CVERecord?id=CVE-2026-58384 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58384 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16216 external
https://access.redhat.com/security/cve/CVE-2026-59090 self
https://bugzilla.redhat.com/show_bug.cgi?id=2496584 external
https://www.cve.org/CVERecord?id=CVE-2026-59090 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59090 external
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509 external
https://access.redhat.com/security/cve/CVE-2026-66758 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507475 external
https://www.cve.org/CVERecord?id=CVE-2026-66758 external
https://nvd.nist.gov/vuln/detail/CVE-2026-66758 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16528 external
https://access.redhat.com/security/cve/CVE-2026-90947 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533005 external
https://www.cve.org/CVERecord?id=CVE-2026-90947 external
https://nvd.nist.gov/vuln/detail/CVE-2026-90947 external
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16682 external
https://access.redhat.com/security/cve/CVE-2026-90948 self
https://bugzilla.redhat.com/show_bug.cgi?id=2533008 external
https://www.cve.org/CVERecord?id=CVE-2026-90948 external
https://nvd.nist.gov/vuln/detail/CVE-2026-90948 external
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16742 external
https://access.redhat.com/security/cve/CVE-2026-92248 self
https://bugzilla.redhat.com/show_bug.cgi?id=2534282 external
https://www.cve.org/CVERecord?id=CVE-2026-92248 external
https://nvd.nist.gov/vuln/detail/CVE-2026-92248 external
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16775 external
https://access.redhat.com/security/cve/CVE-2026-97185 self
https://bugzilla.redhat.com/show_bug.cgi?id=2539980 external
https://www.cve.org/CVERecord?id=CVE-2026-97185 external
https://nvd.nist.gov/vuln/detail/CVE-2026-97185 external
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16788 external
Acknowledgments
@hxteam Rakan Alotaibi
bb1abu
Tristan Madani
Harsh Verma
hoyong jin
GovTech Cybersecurity Group Tan Inn Fung
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for gimp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169)\n\n* gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379)\n\n* gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380)\n\n* gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090)\n\n* gimp: gimp: Integer overflow in read_RLE_channel() (CVE-2026-58384)\n\n* gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758)\n\n* gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304)\n\n* gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301)\n\n* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302)\n\n* gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305)\n\n* gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303)\n\n* gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306)\n\n* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307)\n\n* gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file (CVE-2026-90947)\n\n* gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions (CVE-2026-90948)\n\n* gimp: integer overflow when generating a thumbnail preview for a PSD file (CVE-2026-92248)\n\n* gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file (CVE-2026-97185)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:93589",
        "url": "https://access.redhat.com/errata/RHSA-2026:93589"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2461725",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461725"
      },
      {
        "category": "external",
        "summary": "2495997",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495997"
      },
      {
        "category": "external",
        "summary": "2496135",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496135"
      },
      {
        "category": "external",
        "summary": "2496584",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496584"
      },
      {
        "category": "external",
        "summary": "2497431",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497431"
      },
      {
        "category": "external",
        "summary": "2507475",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507475"
      },
      {
        "category": "external",
        "summary": "2520560",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520560"
      },
      {
        "category": "external",
        "summary": "2520561",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520561"
      },
      {
        "category": "external",
        "summary": "2520579",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520579"
      },
      {
        "category": "external",
        "summary": "2520582",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520582"
      },
      {
        "category": "external",
        "summary": "2520583",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520583"
      },
      {
        "category": "external",
        "summary": "2520591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520591"
      },
      {
        "category": "external",
        "summary": "2520594",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520594"
      },
      {
        "category": "external",
        "summary": "2533005",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533005"
      },
      {
        "category": "external",
        "summary": "2533008",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533008"
      },
      {
        "category": "external",
        "summary": "2534282",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2534282"
      },
      {
        "category": "external",
        "summary": "2539980",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539980"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93589.json"
      }
    ],
    "title": "Red Hat Security Advisory: gimp security update",
    "tracking": {
      "current_release_date": "2026-11-05T19:30:43+00:00",
      "generator": {
        "date": "2026-11-05T19:30:43+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.4"
        }
      },
      "id": "RHSA-2026:93589",
      "initial_release_date": "2026-11-02T09:58:04+00:00",
      "revision_history": [
        {
          "date": "2026-11-02T09:58:04+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-02T09:58:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-05T19:30:43+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
                  "product_id": "AppStream-9.2.0.Z.E4S",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_2.7.src",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_2.7.src",
                  "product_id": "gimp-2:2.99.8-4.el9_2.7.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_2.7?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_2.7.aarch64",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_2.7.aarch64",
                  "product_id": "gimp-2:2.99.8-4.el9_2.7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_2.7?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_2.7?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_2.7?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_2.7?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_2.7?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_2.7?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_2.7.ppc64le",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_id": "gimp-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_2.7?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_2.7?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_2.7?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_2.7?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_2.7?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_2.7?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_2.7.s390x",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_2.7.s390x",
                  "product_id": "gimp-2:2.99.8-4.el9_2.7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_2.7?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_2.7.s390x",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_2.7.s390x",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_2.7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_2.7?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_2.7?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_2.7?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_2.7?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_2.7?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_2.7.x86_64",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_2.7.x86_64",
                  "product_id": "gimp-2:2.99.8-4.el9_2.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_2.7?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_2.7?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_2.7?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_2.7?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_2.7?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_2.7?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_2.7.i686",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_2.7.i686",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_2.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_2.7?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_2.7?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_2.7?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_2.7?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_2.7?arch=i686\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_2.7.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_2.7.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_2.7.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_2.7.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_2.7.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_2.7.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_2.7.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_2.7.src",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_2.7.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_2.7.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_2.7.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_2.7.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_2.7.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_2.7.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_2.7.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_2.7.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_2.7.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
          "product_id": "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-18301",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:41:18.578562+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520561"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via PSD file parsing integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity for Red Hat because successful exploitation grants arbitrary code execution within the privileges of the active user, justifying a higher severity despite requiring user interaction to open a compromised file. GIMP is an optional desktop application not installed or enabled by default in standard Red Hat Enterprise Linux server environments. Consequently, headless systems and standard server installations are not exposed unless workstation packages have been explicitly installed and utilized to process untrusted graphics.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18301"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520561",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520561"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18301",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18301"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18301",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18301"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-454/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-454/"
        }
      ],
      "release_date": "2026-08-20T16:23:03.121000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted or suspicious PSD files with GIMP. As GIMP is a desktop application that processes untrusted content, exercising caution with the origin of files is a primary defense. No specific configuration or operational controls are available to prevent exploitation without patching.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via PSD file parsing integer overflow"
    },
    {
      "cve": "CVE-2026-18302",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input"
      },
      "discovery_date": "2026-08-20T16:43:09.796768+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute code in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity because opening a maliciously crafted image file can lead to arbitrary code execution with the privileges of the active user session. In Red Hat Enterprise Linux, GIMP is an interactive graphical application typically used in workstation or desktop environments, rather than an automated service or background daemon. Because exploitation requires explicit user interaction to process untrusted files, systems lacking graphical desktop environments or where users do not handle external image assets remain largely insulated from this risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18302"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18302",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18302"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18302",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18302"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1a11636fae53c922fe92273b8f4e33c7a9176",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1a11636fae53c922fe92273b8f4e33c7a9176"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-455/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-455/"
        }
      ],
      "release_date": "2026-08-20T16:23:11.929000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should exercise caution and avoid opening TIF image files from untrusted or unknown sources. As a general security practice, only process files from trusted origins.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow"
    },
    {
      "cve": "CVE-2026-18303",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input"
      },
      "discovery_date": "2026-08-20T16:44:08.354680+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520583"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via TIF file parsing vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity because successful exploitation can allow arbitrary code execution with the privileges of the logged-in user, potentially compromising local files and user data. In Red Hat Enterprise Linux, GIMP is an optional interactive image manipulation utility rather than a background network service, limiting exposure to active user sessions. Triggering the flaw requires a user to manually open an untrusted, specially crafted TIFF image.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18303"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520583",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520583"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18303",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18303"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18303",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18303"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-456/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-456/"
        }
      ],
      "release_date": "2026-08-20T16:23:19.019000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening TIF image files from untrusted or unknown sources. As this flaw requires user interaction to open a malicious file, exercising caution with file origins can prevent exploitation.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via TIF file parsing vulnerability"
    },
    {
      "cve": "CVE-2026-18304",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:41:26.762587+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520560"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Arbitrary code execution via crafted TIF file parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having an Important impact because successful exploitation allows arbitrary code execution within the context of the active user session. In Red Hat Enterprise Linux, GIMP is an interactive graphical image editor typically installed on desktop workstations rather than headless servers, and it does not operate as a background daemon or listening service. Exploitation is constrained by the requirement for explicit user interaction to open a specially crafted TIFF file, with the overall blast radius limited to the permissions of the targeted local account.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18304"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520560",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520560"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18304"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-457/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-457/"
        }
      ],
      "release_date": "2026-08-20T16:23:27.514000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "Since this vulnerability requires user interaction with a malicious file, users should exercise caution when opening TIF image files from untrusted sources. To further reduce risk, consider running GIMP within a sandboxed environment, such as a container or Flatpak, to limit the potential impact of a successful exploit.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Arbitrary code execution via crafted TIF file parsing"
    },
    {
      "cve": "CVE-2026-18305",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:43:47.591846+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having an Important impact because successful exploitation can allow arbitrary code execution with the privileges of the active desktop user, potentially compromising personal files and session data. While exploitation requires user interaction to open a malicious image file, the potential for complete process takeover elevates the severity above Moderate. In standard Red Hat Enterprise Linux environments, GIMP is an optional desktop package rather than a default system service, confining the attack surface primarily to graphical workstation installations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18305"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18305",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18305"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18305",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18305"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-458/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-458/"
        }
      ],
      "release_date": "2026-08-20T16:23:35.093000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid opening TIF image files from untrusted or unknown sources in GIMP. This operational control prevents the application from processing malicious input that could lead to arbitrary code execution.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow"
    },
    {
      "cve": "CVE-2026-18306",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:45:34.197934+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user\u0027s process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "On Red Hat Enterprise Linux workstations where desktop image processing tools are deployed, this issue is rated with an Important impact because successfully tricking an end user into opening a maliciously crafted image allows execution of arbitrary commands with full user privileges. Although triggering the condition requires social engineering or direct interaction to open the file, the potential compromise of the local user environment justifies an Important severity rating rather than Moderate. Server installations without graphical desktop packages or interactive image workflows remain unaffected by default.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18306"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/"
        }
      ],
      "release_date": "2026-08-20T16:23:42.663000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted SGI image files with GIMP. If GIMP is not required, consider removing the `gimp` package from the system.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow"
    },
    {
      "cve": "CVE-2026-18307",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-08-20T16:46:02.805860+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520594"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity because successful exploitation allows arbitrary code execution within the privileges of the targeted user account, though it requires user interaction rather than remote unauthenticated access. In typical Red Hat Enterprise Linux environments, GIMP is an optional desktop application rather than an automated or network-facing service, limiting the attack surface to interactive workstation sessions. Because the defect triggers only when processing untrusted TIFF graphics, exposure remains confined to the user session without providing automatic elevation to root privileges.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18307"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520594",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520594"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18307",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18307"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18307",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18307"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/"
        }
      ],
      "release_date": "2026-08-20T16:23:52.557000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening untrusted TIF image files with GIMP. If GIMP is not required, consider removing the package from the system. For systems where GIMP is necessary, exercise caution when handling TIF files from unknown or suspicious sources.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Rakan Alotaibi"
          ],
          "organization": "@hxteam"
        }
      ],
      "cve": "CVE-2026-42169",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-24T20:54:11.536193+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461725"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in GIMP\u0027s APNG loader and DDS plug-in could lead to a heap-buffer-overflow when processing specially crafted image files. Exploitation requires a user to open a malicious APNG or DDS image. Red Hat products shipping GIMP are affected if users are exposed to untrusted image files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42169"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461725",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461725"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42169",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42169"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42169",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42169"
        }
      ],
      "release_date": "2026-08-04T00:20:36.222000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "bb1abu"
          ]
        }
      ],
      "cve": "CVE-2026-58379",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: Heap buffer overflow in read_channel_data()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw in GIMP\u0027s Paint Shop Pro (PSP) file format parser. A heap buffer overflow can occur when processing a specially crafted PSP file, potentially leading to arbitrary code execution or denial of service. Exploitation requires user interaction, as a malicious file must be opened by the GIMP application.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58379"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58379"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16205",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16205"
        }
      ],
      "release_date": "2026-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening untrusted Paint Shop Pro (PSP) image files with GIMP. As a general security practice, it is recommended to only process image files from trusted sources. If GIMP is not essential, consider removing the package to eliminate the attack surface.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: Heap buffer overflow in read_channel_data()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "bb1abu"
          ]
        }
      ],
      "cve": "CVE-2026-58380",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2026-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496135"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in GIMP\u0027s PNM file parser could lead to memory corruption and potentially arbitrary code execution or denial of service. The vulnerability requires a user to open a specially crafted PNM image file with GIMP. As a desktop application, the impact is limited to the user\u0027s session and requires user interaction.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58380"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496135",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496135"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58380"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16206",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16206"
        }
      ],
      "release_date": "2026-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "None \u2014 requires opening a crafted PNM file.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "bb1abu"
          ]
        }
      ],
      "cve": "CVE-2026-58384",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497431"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: Integer overflow in read_RLE_channel()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in GIMP\u0027s PSD parser. An integer overflow in read_RLE_channel() can make the RLE row-length allocation too small and lead to heap memory corruption during subsequent row processing. Successful exploitation requires a user to open a specially crafted PSD file.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58384"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497431",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497431"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58384"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16216",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16216"
        }
      ],
      "release_date": "2026-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "None \u2014 requires opening a crafted PSD file.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: Integer overflow in read_RLE_channel()"
    },
    {
      "cve": "CVE-2026-59090",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-07-02T15:40:19.302000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496584"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw in the GIMP image manipulation program. An unsigned integer underflow in the PSD plugin can lead to arbitrary code execution when a user opens a specially crafted `.psd` file. This vulnerability primarily affects desktop environments where GIMP is installed and used to process untrusted image files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59090"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496584",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496584"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59090",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59090"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59090",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59090"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509"
        }
      ],
      "release_date": "2026-06-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening untrusted or suspicious PSD image files with GIMP. As a general security practice, it is recommended to only process image files from trusted sources.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Tristan Madani"
          ]
        }
      ],
      "cve": "CVE-2026-66758",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507475"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to convince a user to process a specially crafted FITS image with GIMP, reducing the likelihood of exploitation. However, successful exploitation may potentially lead to arbitrary code execution or a denial of service.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to this reason, this flaw has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66758"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507475",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507475"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66758",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66758"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66758",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66758"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16528",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16528"
        }
      ],
      "release_date": "2026-07-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not open FITS files from untrusted sources with GIMP.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Harsh Verma"
          ]
        }
      ],
      "cve": "CVE-2026-90947",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-09-14T11:13:47.654000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533005"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as having Important impact because successful exploitation can allow arbitrary code execution within the privileges of the local desktop user, despite requiring explicit user interaction to open a malicious preset file. GIMP is an interactive graphical editing tool rather than an automated network service, which confines the attack surface to desktop sessions where untrusted lighting presets are loaded. Default Red Hat Enterprise Linux server environments are not exposed unless optional workstation packages and graphical desktop environments are explicitly installed.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-90947"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533005",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533005"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-90947",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-90947"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90947",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90947"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16682",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16682"
        }
      ],
      "release_date": "2026-09-14T11:52:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "hoyong jin"
          ]
        }
      ],
      "cve": "CVE-2026-90948",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-09-14T12:00:05.944000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2533008"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s ICO file loader. When processing an ICO file containing an embedded PNG image, an integer overflow can occur during the calculation of the required buffer size. This leads to an undersized buffer being allocated, causing a heap-based buffer overflow when the decoded pixel data is written. A remote attacker could exploit this by crafting a malicious ICO file, which, when opened, could lead to arbitrary code execution or a crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because, although exploitation requires user interaction to open an untrusted image file, a successful attack can result in arbitrary code execution with the permissions of the user running GIMP. In typical Red Hat Enterprise Linux server environments, GIMP is not installed or enabled by default, confining the risk primarily to workstation and desktop systems where users interactively open external files. The flaw cannot be exploited directly over the network without user intervention, reducing the likelihood of automated or widespread compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-90948"
        },
        {
          "category": "external",
          "summary": "RHBZ#2533008",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533008"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-90948",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-90948"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90948",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90948"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16742",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16742"
        }
      ],
      "release_date": "2026-09-14T12:03:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: heap-based buffer overflow in ICO loader via integer overflow in embedded PNG dimensions"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Tan Inn Fung"
          ],
          "organization": "GovTech Cybersecurity Group"
        }
      ],
      "cve": "CVE-2026-92248",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-09-15T19:40:41.448000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2534282"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a heap-based buffer overflow when the image data is decoded. This buffer overflow corrupts adjacent heap objects, allowing for a controlled memory write that can result in an application crash or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: integer overflow when generating a thumbnail preview for a PSD file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, a user needs to navigate to a directory containing a specially crafted PSD image file using the GIMP file chooser, limiting its exposure. The image file does not need to be opened as this issue is triggered automatically when the preview is generated. However, successful exploitation can result in an application crash and potentially arbitrary code execution. For these reasons, this flaw has been rated with an important severity.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-92248"
        },
        {
          "category": "external",
          "summary": "RHBZ#2534282",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2534282"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-92248",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-92248"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92248",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92248"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16775",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16775"
        }
      ],
      "release_date": "2026-09-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not navigate to directories containing PSD files from untrusted sources using the GIMP file chooser. Additionally, users can disable thumbnail generation in the preferences to prevent the vulnerable code path from being reached.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: integer overflow when generating a thumbnail preview for a PSD file"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Harsh Verma"
          ]
        }
      ],
      "cve": "CVE-2026-97185",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-09-24T08:06:24.381000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2539980"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the plug-in does not properly validate vector indices before writing into fixed-size arrays. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to load a malicious preset file, potentially causing a crash or enabling arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue requires a local user to load a crafted GIMPressionist preset. The out-of-bounds write can corrupt memory and may allow code execution in the user\u0027s context. It is distinct from CVE-2026-90947, which addressed a similar flaw in the Lighting Effects plug-in.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
          "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
          "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97185"
        },
        {
          "category": "external",
          "summary": "RHBZ#2539980",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539980"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97185",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97185"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97185",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97185"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16788",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16788"
        }
      ],
      "release_date": "2026-09-24T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-02T09:58:04+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:93589"
        },
        {
          "category": "workaround",
          "details": "Do not load GIMPressionist preset files from untrusted sources.",
          "product_ids": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.src",
            "AppStream-9.2.0.Z.E4S:gimp-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-debugsource-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-2:2.99.8-4.el9_2.7.x86_64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.aarch64",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.i686",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.ppc64le",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.s390x",
            "AppStream-9.2.0.Z.E4S:gimp-libs-debuginfo-2:2.99.8-4.el9_2.7.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: out-of-bounds write in GIMPressionist plugin via crafted preset file"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON
How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.