CVE-2026-2045
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92º percentile).
Vulnerabilità · 241 giorni fa
Debian ha rilasciato aggiornamenti di sicurezza per GIMP che risolvono cinque vulnerabilità nel parsing di immagini. File XWD, ICNS, PGM o ICO malformati possono causare DoS o potenzialmente permettere RCE all'apertura.
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92º percentile).
CVSS 7.8 HIGH: gIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 1% (70º percentile).
CVSS 7.8 HIGH: gIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. EPSS 1% (65º percentile).
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 0.7% (53º percentile).
CVSS 7.8 HIGH: gIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 0.7% (53º percentile).
1 fonte che coprono questa storia
SECURITY] [DSA 6155-1] spip security update
SECURITY] [DSA 6155-1] spip security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6155-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq - Package : spip CVE ID…
SECURITY] [DSA 6156-1] gimp security update
SECURITY] [DSA 6156-1] gimp security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6156-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 03, 2026 https://www.debian.org/security/faq - Package : gimp CVE ID…
SECURITY] [DSA 6148-1] firefox-esr security update
SECURITY] [DSA 6148-1] firefox-esr security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6148-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq - Package…
SECURITY] [DSA 6147-1] pillow security update
SECURITY] [DSA 6147-1] pillow security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6147-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 20, 2026 https://www.debian.org/security/faq - Package : pillow CVE
SECURITY] [DSA 6145-1] nova security update
SECURITY] [DSA 6145-1] nova security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6145-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - Package : nova CVE I
SECURITY] [DSA 6142-1] gegl security update
SECURITY] [DSA 6142-1] gegl security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6142-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - Package : gegl CVE I
SECURITY] [DSA 6143-1] libvpx security update
SECURITY] [DSA 6143-1] libvpx security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6143-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2026 https://www.debian.org/security/faq - Package : libvpx CVE
SECURITY] [DSA 6144-1] inetutils security update
SECURITY] [DSA 6144-1] inetutils security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6144-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - Package : inetu
Part of the PlainSec briefing for 2026-03-03