CVE-2026-2045
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92nd percentile).
Vulnerabilities · 241 days ago
Debian released security updates for GIMP that address five image-parsing vulnerabilities. Malformed XWD, ICNS, PGM and ICO files can cause denial of service or potentially allow arbitrary code execution when opened.
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 5% (92nd percentile).
CVSS 7.8 HIGH: gIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 1% (70th percentile).
CVSS 7.8 HIGH: gIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. EPSS 1% (65th percentile).
CVSS 7.8 HIGH: gIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. EPSS 0.7% (53rd percentile).
CVSS 7.8 HIGH: gIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. EPSS 0.7% (53rd percentile).
1 source covering this story
SECURITY] [DSA 6155-1] spip security update
SECURITY] [DSA 6155-1] spip security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6155-1 security@debian.org https://www.debian.org/security/ Sebastien Delafond March 03, 2026 https://www.debian.org/security/faq - Package : spip CVE ID…
SECURITY] [DSA 6156-1] gimp security update
SECURITY] [DSA 6156-1] gimp security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6156-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff March 03, 2026 https://www.debian.org/security/faq - Package : gimp CVE ID…
SECURITY] [DSA 6148-1] firefox-esr security update
SECURITY] [DSA 6148-1] firefox-esr security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6148-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 25, 2026 https://www.debian.org/security/faq - Package…
SECURITY] [DSA 6147-1] pillow security update
SECURITY] [DSA 6147-1] pillow security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6147-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 20, 2026 https://www.debian.org/security/faq - Package : pillow CVE
SECURITY] [DSA 6145-1] nova security update
SECURITY] [DSA 6145-1] nova security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6145-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - Package : nova CVE I
SECURITY] [DSA 6142-1] gegl security update
SECURITY] [DSA 6142-1] gegl security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6142-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - Package : gegl CVE I
SECURITY] [DSA 6143-1] libvpx security update
SECURITY] [DSA 6143-1] libvpx security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6143-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff February 19, 2026 https://www.debian.org/security/faq - Package : libvpx CVE
SECURITY] [DSA 6144-1] inetutils security update
SECURITY] [DSA 6144-1] inetutils security update -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - Debian Security Advisory DSA-6144-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2026 https://www.debian.org/security/faq - Package : inetu
Part of the PlainSec briefing for 2026-03-03