GIMP vulnerabilities

A vulnerability in GIMP's XWD file parsing allows remote code execution due to improper validation of user-supplied data, resulting in an out-of-bounds write. User interaction is required, such as opening a malicious file or visiting a malicious page.

A vulnerability in GIMP's PGM file parsing allows remote code execution due to uninitialized memory access. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

A heap-based buffer overflow vulnerability in GIMP's ICO file parsing allows remote code execution. Exploitation requires user interaction, such as opening a malicious file or visiting a crafted webpage.

A heap-based buffer overflow vulnerability in GIMP's PSP file parsing allows remote code execution. User interaction is required (opening a malicious file or page).

In GIMP, the "Despeckle" plug-in has an integer overflow vulnerability. Unchecked multiplication of image dimensions (width, height, bytes-per-pixel) can cause insufficient memory allocation and out-of-bounds writes.

A flaw was found in GIMP when processing XCF image files. If a user opens a specially crafted file, GIMP can be tricked into making serious memory errors, potentially leading to crashes and use-after-free issues.

A flaw was found in GIMP when processing specially crafted TGA image files. Opening such a file can cause serious memory errors, leading to a heap buffer overflow and potential crashes.

A vulnerability was found in GIMP's ani_load_image() function, causing a stack-based buffer overflow. Opening a specially crafted .ANI file may allow arbitrary code execution.