Vulnerabilities & Exploits
GIMP image-parsing flaws risk DoS and possible code execution Debian released security updates for GIMP that address five image-parsing vulnerabilities. Malformed XWD, ICNS, PGM and ICO files can cause denial of service or potentially allow arbitrary code execution when opened.
1 source · Mar 3
CVE-2026-2045 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92nd percentile).
CVE-2026-0797 NVD KEV
CVSS 7.8 HIGH: gIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 1% (70th percentile).
CVE-2026-2044 NVD KEV
CVSS 7.8 HIGH: gIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. EPSS 1% (65th percentile).
CVE-2026-2048 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 0.7% (53rd percentile).
CVE-2026-2047 NVD KEV
CVSS 7.8 HIGH: gIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 0.7% (53rd percentile).
Timeline Sources Mar 3 Debian Security Advisories
SECURITY] [DSA 6155-1] spip security update
SECURITY] [DSA 6155-1] spip security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6155-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq - Package : spip CVE ID…
original Mar 3 Debian Security Advisories
SECURITY] [DSA 6156-1] gimp security update
SECURITY] [DSA 6156-1] gimp security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6156-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 03, 2026 https://www.debian.org/security/faq - Package : gimp CVE ID…
original Feb 25 Debian Security Advisories
SECURITY] [DSA 6148-1] firefox-esr security update
SECURITY] [DSA 6148-1] firefox-esr security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6148-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq - Package…
original Part of the PlainSec briefing for 2026-03-03
Every edition of this story: GIMP image-parsing flaws risk DoS and possible code execution
More from today Vulnerabilities & Exploits
GIMP image-parsing flaws risk DoS and possible code execution Debian released security updates for GIMP that address five image-parsing vulnerabilities. Malformed XWD, ICNS, PGM and ICO files can cause denial of service or potentially allow arbitrary code execution when opened.
1 source · Mar 3
CVE-2026-2045 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92nd percentile).
CVE-2026-0797 NVD KEV
CVSS 7.8 HIGH: gIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 1% (70th percentile).
CVE-2026-2044 NVD KEV
CVSS 7.8 HIGH: gIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. EPSS 1% (65th percentile).
CVE-2026-2048 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 0.7% (53rd percentile).
CVE-2026-2047 NVD KEV
CVSS 7.8 HIGH: gIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 0.7% (53rd percentile).
Timeline Sources Mar 3 Debian Security Advisories
SECURITY] [DSA 6155-1] spip security update
SECURITY] [DSA 6155-1] spip security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6155-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq - Package : spip CVE ID…
original Mar 3 Debian Security Advisories
SECURITY] [DSA 6156-1] gimp security update
SECURITY] [DSA 6156-1] gimp security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6156-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 03, 2026 https://www.debian.org/security/faq - Package : gimp CVE ID…
original Feb 25 Debian Security Advisories
SECURITY] [DSA 6148-1] firefox-esr security update
SECURITY] [DSA 6148-1] firefox-esr security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6148-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq - Package…
original Part of the PlainSec briefing for 2026-03-03
Every edition of this story: GIMP image-parsing flaws risk DoS and possible code execution
More from today