RHSA-2026:73768

Vulnerability from csaf_redhat - Published: 2026-09-30 14:44 - Updated: 2026-09-30 14:52
Summary
Red Hat Security Advisory: gimp security update
Severity
Important
Notes
Topic: An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169) * gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379) * gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380) * gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090) * gimp: gimp: Integer overflow in read_RLE_channel() (CVE-2026-58384) * gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758) * gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304) * gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302) * gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305) * gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303) * gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306) * gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-18301

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-18302

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute code in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18303

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18304

A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18305

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18306

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user's process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-18307

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-42169

A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-131 - Incorrect Calculation of Buffer Size
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Moderate
CVE-2026-58379

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-122 - Heap-based Buffer Overflow
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-58380

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-193 - Off-by-one Error
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Moderate
CVE-2026-58384

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-59090

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.

8.4 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H
CWE-191 - Integer Underflow (Wrap or Wraparound)
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
CVE-2026-66758

A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.

7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 30 products, the same list as for CVE-2026-18301
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:73768 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2461725 external
https://bugzilla.redhat.com/show_bug.cgi?id=2495997 external
https://bugzilla.redhat.com/show_bug.cgi?id=2496135 external
https://bugzilla.redhat.com/show_bug.cgi?id=2496584 external
https://bugzilla.redhat.com/show_bug.cgi?id=2497431 external
https://bugzilla.redhat.com/show_bug.cgi?id=2507475 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520560 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520561 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520579 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520582 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520583 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520591 external
https://bugzilla.redhat.com/show_bug.cgi?id=2520594 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-18301 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520561 external
https://www.cve.org/CVERecord?id=CVE-2026-18301 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18301 external
https://gitlab.gnome.org/GNOME/gimp/-/merge_reque… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18302 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520579 external
https://www.cve.org/CVERecord?id=CVE-2026-18302 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18302 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18303 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520583 external
https://www.cve.org/CVERecord?id=CVE-2026-18303 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18303 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/5633… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18304 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520560 external
https://www.cve.org/CVERecord?id=CVE-2026-18304 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18304 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18305 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520582 external
https://www.cve.org/CVERecord?id=CVE-2026-18305 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18305 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18306 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520591 external
https://www.cve.org/CVERecord?id=CVE-2026-18306 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18306 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/7653… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-18307 self
https://bugzilla.redhat.com/show_bug.cgi?id=2520594 external
https://www.cve.org/CVERecord?id=CVE-2026-18307 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18307 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/bace… external
https://www.zerodayinitiative.com/advisories/ZDI-… external
https://access.redhat.com/security/cve/CVE-2026-42169 self
https://bugzilla.redhat.com/show_bug.cgi?id=2461725 external
https://www.cve.org/CVERecord?id=CVE-2026-42169 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42169 external
https://access.redhat.com/security/cve/CVE-2026-58379 self
https://bugzilla.redhat.com/show_bug.cgi?id=2495997 external
https://www.cve.org/CVERecord?id=CVE-2026-58379 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58379 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16205 external
https://access.redhat.com/security/cve/CVE-2026-58380 self
https://bugzilla.redhat.com/show_bug.cgi?id=2496135 external
https://www.cve.org/CVERecord?id=CVE-2026-58380 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58380 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16206 external
https://access.redhat.com/security/cve/CVE-2026-58384 self
https://bugzilla.redhat.com/show_bug.cgi?id=2497431 external
https://www.cve.org/CVERecord?id=CVE-2026-58384 external
https://nvd.nist.gov/vuln/detail/CVE-2026-58384 external
https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16216 external
https://access.redhat.com/security/cve/CVE-2026-59090 self
https://bugzilla.redhat.com/show_bug.cgi?id=2496584 external
https://www.cve.org/CVERecord?id=CVE-2026-59090 external
https://nvd.nist.gov/vuln/detail/CVE-2026-59090 external
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509 external
https://access.redhat.com/security/cve/CVE-2026-66758 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507475 external
https://www.cve.org/CVERecord?id=CVE-2026-66758 external
https://nvd.nist.gov/vuln/detail/CVE-2026-66758 external
https://gitlab.gnome.org/GNOME/gimp/-/issues/16528 external
Acknowledgments
@hxteam Rakan Alotaibi
bb1abu
Tristan Madani
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169)\n\n* gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379)\n\n* gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380)\n\n* gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow (CVE-2026-59090)\n\n* gimp: gimp: Integer overflow in read_RLE_channel() (CVE-2026-58384)\n\n* gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758)\n\n* gimp: GIMP: Arbitrary code execution via crafted TIF file parsing (CVE-2026-18304)\n\n* gimp: GIMP: Remote code execution via PSD file parsing integer overflow (CVE-2026-18301)\n\n* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18302)\n\n* gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow (CVE-2026-18305)\n\n* gimp: GIMP: Remote code execution via TIF file parsing vulnerability (CVE-2026-18303)\n\n* gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow (CVE-2026-18306)\n\n* gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow (CVE-2026-18307)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:73768",
        "url": "https://access.redhat.com/errata/RHSA-2026:73768"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2461725",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461725"
      },
      {
        "category": "external",
        "summary": "2495997",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495997"
      },
      {
        "category": "external",
        "summary": "2496135",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496135"
      },
      {
        "category": "external",
        "summary": "2496584",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496584"
      },
      {
        "category": "external",
        "summary": "2497431",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497431"
      },
      {
        "category": "external",
        "summary": "2507475",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507475"
      },
      {
        "category": "external",
        "summary": "2520560",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520560"
      },
      {
        "category": "external",
        "summary": "2520561",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520561"
      },
      {
        "category": "external",
        "summary": "2520579",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520579"
      },
      {
        "category": "external",
        "summary": "2520582",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520582"
      },
      {
        "category": "external",
        "summary": "2520583",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520583"
      },
      {
        "category": "external",
        "summary": "2520591",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520591"
      },
      {
        "category": "external",
        "summary": "2520594",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520594"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_73768.json"
      }
    ],
    "title": "Red Hat Security Advisory: gimp security update",
    "tracking": {
      "current_release_date": "2026-09-30T14:52:33+00:00",
      "generator": {
        "date": "2026-09-30T14:52:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:73768",
      "initial_release_date": "2026-09-30T14:44:00+00:00",
      "revision_history": [
        {
          "date": "2026-09-30T14:44:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-30T14:44:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-30T14:52:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                  "product_id": "AppStream-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_6.20.src",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_6.20.src",
                  "product_id": "gimp-2:2.99.8-4.el9_6.20.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_6.20?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_6.20.aarch64",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_6.20.aarch64",
                  "product_id": "gimp-2:2.99.8-4.el9_6.20.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_6.20?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_6.20?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_6.20?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_6.20?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_6.20?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_6.20?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_6.20.ppc64le",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_id": "gimp-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_6.20?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_6.20?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_6.20?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_6.20?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_6.20?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_6.20?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_6.20.x86_64",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_6.20.x86_64",
                  "product_id": "gimp-2:2.99.8-4.el9_6.20.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_6.20?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_6.20?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_6.20?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_6.20?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_6.20?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_6.20?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_6.20.i686",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_6.20.i686",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_6.20.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_6.20?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_6.20?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_6.20?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_6.20?arch=i686\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_6.20?arch=i686\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gimp-2:2.99.8-4.el9_6.20.s390x",
                "product": {
                  "name": "gimp-2:2.99.8-4.el9_6.20.s390x",
                  "product_id": "gimp-2:2.99.8-4.el9_6.20.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp@2.99.8-4.el9_6.20?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-2:2.99.8-4.el9_6.20.s390x",
                "product": {
                  "name": "gimp-libs-2:2.99.8-4.el9_6.20.s390x",
                  "product_id": "gimp-libs-2:2.99.8-4.el9_6.20.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs@2.99.8-4.el9_6.20?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
                "product": {
                  "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
                  "product_id": "gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debugsource@2.99.8-4.el9_6.20?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                "product": {
                  "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                  "product_id": "gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-debuginfo@2.99.8-4.el9_6.20?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                "product": {
                  "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                  "product_id": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo@2.99.8-4.el9_6.20?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                "product": {
                  "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                  "product_id": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/gimp-libs-debuginfo@2.99.8-4.el9_6.20?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_6.20.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_6.20.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_6.20.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_6.20.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_6.20.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_6.20.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_6.20.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_6.20.src",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-2:2.99.8-4.el9_6.20.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64"
        },
        "product_reference": "gimp-2:2.99.8-4.el9_6.20.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        },
        "product_reference": "gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64"
        },
        "product_reference": "gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        },
        "product_reference": "gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_6.20.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_6.20.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_6.20.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_6.20.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_6.20.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_6.20.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-2:2.99.8-4.el9_6.20.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64"
        },
        "product_reference": "gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        },
        "product_reference": "gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-18301",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:41:18.578562+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520561"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the `read_channel_data` function during PSD (Photoshop Document) file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via PSD file parsing integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18301"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520561",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520561"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18301",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18301"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18301",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18301"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-454/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-454/"
        }
      ],
      "release_date": "2026-08-20T16:23:03.121000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted or suspicious PSD files with GIMP. As GIMP is a desktop application that processes untrusted content, exercising caution with the origin of files is a primary defense. No specific configuration or operational controls are available to prevent exploitation without patching.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via PSD file parsing integer overflow"
    },
    {
      "cve": "CVE-2026-18302",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-20T16:43:09.796768+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520579"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows remote attackers to execute arbitrary code. Successful exploitation requires user interaction, where a target must open a malicious TIF file. An attacker can leverage this to execute code in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18302"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520579",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520579"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18302",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18302"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18302",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18302"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1a11636fae53c922fe92273b8f4e33c7a9176",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/77e1a11636fae53c922fe92273b8f4e33c7a9176"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-455/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-455/"
        }
      ],
      "release_date": "2026-08-20T16:23:11.929000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should exercise caution and avoid opening TIF image files from untrusted or unknown sources. As a general security practice, only process files from trusted origins.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow"
    },
    {
      "cve": "CVE-2026-18303",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-08-20T16:44:08.354680+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520583"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient validation of user-supplied data length before copying it to a buffer, leading to potential code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via TIF file parsing vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18303"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520583",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520583"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18303",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18303"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18303",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18303"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-456/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-456/"
        }
      ],
      "release_date": "2026-08-20T16:23:19.019000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening TIF image files from untrusted or unknown sources. As this flaw requires user interaction to open a malicious file, exercising caution with file origins can prevent exploitation.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via TIF file parsing vulnerability"
    },
    {
      "cve": "CVE-2026-18304",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:41:26.762587+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520560"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This vulnerability allows a remote attacker to execute arbitrary code by tricking a user into opening a specially crafted TIF file. The issue arises from improper validation of user-supplied data during TIF file parsing, which can lead to an integer overflow before memory allocation. Successful exploitation could result in the attacker executing code in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Arbitrary code execution via crafted TIF file parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18304"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520560",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520560"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18304",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18304"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18304",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18304"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-457/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-457/"
        }
      ],
      "release_date": "2026-08-20T16:23:27.514000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "Since this vulnerability requires user interaction with a malicious file, users should exercise caution when opening TIF image files from untrusted sources. To further reduce risk, consider running GIMP within a sandboxed environment, such as a container or Flatpak, to limit the potential impact of a successful exploit.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Arbitrary code execution via crafted TIF file parsing"
    },
    {
      "cve": "CVE-2026-18305",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:43:47.591846+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520582"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF (Tagged Image File Format) file. The flaw occurs during TIF file parsing due to improper validation of user-supplied data, which can lead to an integer overflow and enable the attacker to run malicious code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18305"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520582",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520582"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18305",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18305"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18305",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18305"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-458/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-458/"
        }
      ],
      "release_date": "2026-08-20T16:23:35.093000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid opening TIF image files from untrusted or unknown sources in GIMP. This operational control prevents the application from processing malicious input that could lead to arbitrary code execution.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow"
    },
    {
      "cve": "CVE-2026-18306",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-20T16:45:34.197934+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520591"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI (Silicon Graphics Image) files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful exploitation could lead to the attacker executing code in the context of the current user\u0027s process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18306"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520591",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520591"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18306",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18306"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18306",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18306"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-459/"
        }
      ],
      "release_date": "2026-08-20T16:23:42.663000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted SGI image files with GIMP. If GIMP is not required, consider removing the `gimp` package from the system.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow"
    },
    {
      "cve": "CVE-2026-18307",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-08-20T16:46:02.805860+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2520594"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary code execution in the context of the current process.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18307"
        },
        {
          "category": "external",
          "summary": "RHBZ#2520594",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520594"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18307",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18307"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18307",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18307"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d"
        },
        {
          "category": "external",
          "summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/",
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-460/"
        }
      ],
      "release_date": "2026-08-20T16:23:52.557000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening untrusted TIF image files with GIMP. If GIMP is not required, consider removing the package from the system. For systems where GIMP is necessary, exercise caution when handling TIF files from unknown or suspicious sources.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Rakan Alotaibi"
          ],
          "organization": "@hxteam"
        }
      ],
      "cve": "CVE-2026-42169",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-24T20:54:11.536193+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2461725"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in GIMP\u0027s APNG loader and DDS plug-in could lead to a heap-buffer-overflow when processing specially crafted image files. Exploitation requires a user to open a malicious APNG or DDS image. Red Hat products shipping GIMP are affected if users are exposed to untrusted image files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42169"
        },
        {
          "category": "external",
          "summary": "RHBZ#2461725",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461725"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42169",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42169"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42169",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42169"
        }
      ],
      "release_date": "2026-08-04T00:20:36.222000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "bb1abu"
          ]
        }
      ],
      "cve": "CVE-2026-58379",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: Heap buffer overflow in read_channel_data()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw in GIMP\u0027s Paint Shop Pro (PSP) file format parser. A heap buffer overflow can occur when processing a specially crafted PSP file, potentially leading to arbitrary code execution or denial of service. Exploitation requires user interaction, as a malicious file must be opened by the GIMP application.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58379"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58379",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58379"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58379",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58379"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16205",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16205"
        }
      ],
      "release_date": "2026-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening untrusted Paint Shop Pro (PSP) image files with GIMP. As a general security practice, it is recommended to only process image files from trusted sources. If GIMP is not essential, consider removing the package to eliminate the attack surface.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: Heap buffer overflow in read_channel_data()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "bb1abu"
          ]
        }
      ],
      "cve": "CVE-2026-58380",
      "cwe": {
        "id": "CWE-193",
        "name": "Off-by-one Error"
      },
      "discovery_date": "2026-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496135"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in GIMP\u0027s PNM file parser could lead to memory corruption and potentially arbitrary code execution or denial of service. The vulnerability requires a user to open a specially crafted PNM image file with GIMP. As a desktop application, the impact is limited to the user\u0027s session and requires user interaction.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58380"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496135",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496135"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58380"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16206",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16206"
        }
      ],
      "release_date": "2026-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "None \u2014 requires opening a crafted PNM file.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "bb1abu"
          ]
        }
      ],
      "cve": "CVE-2026-58384",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2497431"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: gimp: Integer overflow in read_RLE_channel()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw was found in GIMP\u0027s PSD parser. An integer overflow in read_RLE_channel() can make the RLE row-length allocation too small and lead to heap memory corruption during subsequent row processing. Successful exploitation requires a user to open a specially crafted PSD file.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-58384"
        },
        {
          "category": "external",
          "summary": "RHBZ#2497431",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497431"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-58384",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-58384"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58384",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58384"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16216",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16216"
        }
      ],
      "release_date": "2026-04-11T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "None \u2014 requires opening a crafted PSD file.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: gimp: Integer overflow in read_RLE_channel()"
    },
    {
      "cve": "CVE-2026-59090",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "discovery_date": "2026-07-02T15:40:19.302000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2496584"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in GIMP\u0027s PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim\u0027s system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important severity flaw in the GIMP image manipulation program. An unsigned integer underflow in the PSD plugin can lead to arbitrary code execution when a user opens a specially crafted `.psd` file. This vulnerability primarily affects desktop environments where GIMP is installed and used to process untrusted image files.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-59090"
        },
        {
          "category": "external",
          "summary": "RHBZ#2496584",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496584"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-59090",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-59090"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59090",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59090"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509"
        }
      ],
      "release_date": "2026-06-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, users should avoid opening untrusted or suspicious PSD image files with GIMP. As a general security practice, it is recommended to only process image files from trusted sources.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Tristan Madani"
          ]
        }
      ],
      "cve": "CVE-2026-66758",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507475"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to convince a user to process a specially crafted FITS image with GIMP, reducing the likelihood of exploitation. However, successful exploitation may potentially lead to arbitrary code execution or a denial of service.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to this reason, this flaw has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
          "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
          "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-66758"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507475",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507475"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-66758",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-66758"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66758",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66758"
        },
        {
          "category": "external",
          "summary": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16528",
          "url": "https://gitlab.gnome.org/GNOME/gimp/-/issues/16528"
        }
      ],
      "release_date": "2026-07-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-30T14:44:00+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:73768"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not open FITS files from untrusted sources with GIMP.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.src",
            "AppStream-9.6.0.Z.EUS:gimp-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-debugsource-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-devel-tools-debuginfo-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-2:2.99.8-4.el9_6.20.x86_64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.aarch64",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.i686",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.ppc64le",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.s390x",
            "AppStream-9.6.0.Z.EUS:gimp-libs-debuginfo-2:2.99.8-4.el9_6.20.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.