https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-79902.htmlhttps://patchthecve.com/cve/CVE-2026-79902.htmlTue, 01 Sep 2026 14:18:08 +0000MEDIUM 5.5: A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA) on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting inhttps://patchthecve.com/cve/CVE-2026-80101.htmlhttps://patchthecve.com/cve/CVE-2026-80101.htmlWed, 02 Sep 2026 18:21:26 +0000MEDIUM 4.4: A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation lehttps://patchthecve.com/cve/CVE-2026-78475.htmlhttps://patchthecve.com/cve/CVE-2026-78475.htmlMon, 12 Oct 2026 22:10:00 +0000MEDIUM 6.1: A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in ahttps://patchthecve.com/cve/CVE-2026-78465.htmlhttps://patchthecve.com/cve/CVE-2026-78465.htmlWed, 14 Oct 2026 13:10:00 +0000HIGH 7.0: A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently large dhttps://patchthecve.com/cve/CVE-2026-18309.htmlhttps://patchthecve.com/cve/CVE-2026-18309.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malhttps://patchthecve.com/cve/CVE-2026-18308.htmlhttps://patchthecve.com/cve/CVE-2026-18308.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malihttps://patchthecve.com/cve/CVE-2026-18307.htmlhttps://patchthecve.com/cve/CVE-2026-18307.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ohttps://patchthecve.com/cve/CVE-2026-18306.htmlhttps://patchthecve.com/cve/CVE-2026-18306.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malihttps://patchthecve.com/cve/CVE-2026-18305.htmlhttps://patchthecve.com/cve/CVE-2026-18305.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malihttps://patchthecve.com/cve/CVE-2026-18304.htmlhttps://patchthecve.com/cve/CVE-2026-18304.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malihttps://patchthecve.com/cve/CVE-2026-18303.htmlhttps://patchthecve.com/cve/CVE-2026-18303.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or https://patchthecve.com/cve/CVE-2026-18302.htmlhttps://patchthecve.com/cve/CVE-2026-18302.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or ohttps://patchthecve.com/cve/CVE-2026-18301.htmlhttps://patchthecve.com/cve/CVE-2026-18301.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malihttps://patchthecve.com/cve/CVE-2026-18300.htmlhttps://patchthecve.com/cve/CVE-2026-18300.htmlMon, 26 Oct 2026 10:10:00 +0000HIGH 7.8: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malihttps://patchthecve.com/cve/CVE-2026-59091.htmlhttps://patchthecve.com/cve/CVE-2026-59091.htmlMon, 24 Aug 2026 20:16:50 +0000HIGH 7.3: A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts without https://patchthecve.com/cve/CVE-2026-59090.htmlhttps://patchthecve.com/cve/CVE-2026-59090.htmlMon, 12 Oct 2026 03:17:20 +0000HIGH 8.4: A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource bhttps://patchthecve.com/cve/CVE-2026-59088.htmlhttps://patchthecve.com/cve/CVE-2026-59088.htmlFri, 21 Aug 2026 12:16:29 +0000MEDIUM 5.5: A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integerhttps://patchthecve.com/cve/CVE-2026-59087.htmlhttps://patchthecve.com/cve/CVE-2026-59087.htmlMon, 24 Aug 2026 18:17:00 +0000HIGH 7.8: A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted Seattle Filmworks file. This could lead to a heap overflow, allowing the attacker to https://patchthecve.com/cve/CVE-2026-6384.htmlhttps://patchthecve.com/cve/CVE-2026-6384.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.3: A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.https://patchthecve.com/cve/CVE-2026-40919.htmlhttps://patchthecve.com/cve/CVE-2026-40919.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.1: A flaw was found in GIMP. This vulnerability, a buffer overflow in the `file-seattle-filmworks` plugin, can be exploited when a user opens a specially crafted Seattle Filmworks file. A remote attacker could leverage this to cause a denial of service (DoS), leading to the plugin crashing and potentiahttps://patchthecve.com/cve/CVE-2026-40918.htmlhttps://patchthecve.com/cve/CVE-2026-40918.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.5: A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVhttps://patchthecve.com/cve/CVE-2026-40917.htmlhttps://patchthecve.com/cve/CVE-2026-40917.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.0: A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the `icns_slurp()` function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that procehttps://patchthecve.com/cve/CVE-2026-40916.htmlhttps://patchthecve.com/cve/CVE-2026-40916.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.0: A flaw was found in GIMP. A stack buffer overflow vulnerability in the TIM image loader's 4BPP decoding path allows a local user to cause a Denial of Service (DoS). By opening a specially crafted TIM image file, the application crashes due to an unconditional overflow when writing to a variable-lenghttps://patchthecve.com/cve/CVE-2026-40915.htmlhttps://patchthecve.com/cve/CVE-2026-40915.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.5: A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data.