Vulnerabilità ed exploit
GIMP espone parsing immagini a DoS e potenziale RCE Debian ha rilasciato aggiornamenti di sicurezza per GIMP che risolvono cinque vulnerabilità nel parsing di immagini. File XWD, ICNS, PGM o ICO malformati possono causare DoS o potenzialmente permettere RCE all'apertura.
1 fonte · 3 mar
CVE-2026-2045 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92º percentile).
CVE-2026-0797 NVD KEV
CVSS 7.8 HIGH: gIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 1% (70º percentile).
CVE-2026-2044 NVD KEV
CVSS 7.8 HIGH: gIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. EPSS 1% (65º percentile).
CVE-2026-2048 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 0.7% (53º percentile).
CVE-2026-2047 NVD KEV
CVSS 7.8 HIGH: gIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 0.7% (53º percentile).
Cronologia Fonti 3 mar Debian Security Advisories
SECURITY] [DSA 6155-1] spip security update
SECURITY] [DSA 6155-1] spip security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6155-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq - Package : spip CVE ID…
originale 3 mar Debian Security Advisories
SECURITY] [DSA 6156-1] gimp security update
SECURITY] [DSA 6156-1] gimp security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6156-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 03, 2026 https://www.debian.org/security/faq - Package : gimp CVE ID…
originale 25 feb Debian Security Advisories
SECURITY] [DSA 6148-1] firefox-esr security update
SECURITY] [DSA 6148-1] firefox-esr security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6148-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq - Package…
originale Part of the PlainSec briefing for 2026-03-03
Every edition of this story: GIMP espone parsing immagini a DoS e potenziale RCE
Altro da oggi Vulnerabilità ed exploit
GIMP espone parsing immagini a DoS e potenziale RCE Debian ha rilasciato aggiornamenti di sicurezza per GIMP che risolvono cinque vulnerabilità nel parsing di immagini. File XWD, ICNS, PGM o ICO malformati possono causare DoS o potenzialmente permettere RCE all'apertura.
1 fonte · 3 mar
CVE-2026-2045 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92º percentile).
CVE-2026-0797 NVD KEV
CVSS 7.8 HIGH: gIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 1% (70º percentile).
CVE-2026-2044 NVD KEV
CVSS 7.8 HIGH: gIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. EPSS 1% (65º percentile).
CVE-2026-2048 NVD KEV
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 0.7% (53º percentile).
CVE-2026-2047 NVD KEV
CVSS 7.8 HIGH: gIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 0.7% (53º percentile).
Cronologia Fonti 3 mar Debian Security Advisories
SECURITY] [DSA 6155-1] spip security update
SECURITY] [DSA 6155-1] spip security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6155-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq - Package : spip CVE ID…
originale 3 mar Debian Security Advisories
SECURITY] [DSA 6156-1] gimp security update
SECURITY] [DSA 6156-1] gimp security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6156-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 03, 2026 https://www.debian.org/security/faq - Package : gimp CVE ID…
originale 25 feb Debian Security Advisories
SECURITY] [DSA 6148-1] firefox-esr security update
SECURITY] [DSA 6148-1] firefox-esr security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6148-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq - Package…
originale Part of the PlainSec briefing for 2026-03-03
Every edition of this story: GIMP espone parsing immagini a DoS e potenziale RCE
Altro da oggi