Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

GIMP — Vulnerabilities & Security Advisories 35

All 35 CVE vulnerabilities found in GIMP, with AI-generated Chinese analysis, references, and POCs.

This page provides a comprehensive aggregation of security vulnerabilities associated with GIMP, an open-source raster graphics editor developed by the GNU Project, focusing on various weakness classifications and security tags. It collects data regarding known security flaws, ranging from buffer overflows and code injection issues to denial-of-service conditions, covering vulnerability entries from the early 2000s up to the present day to offer a longitudinal view of the software’s security posture. Readers can utilize this resource to track vendor advisories and patch releases from the GIMP development team, gain a deeper understanding of specific weakness classes that frequently affect image processing applications, and look up the complete vulnerability history of the product to assess past risks and current remediation status. By centralizing these records, the page serves as a vital reference for security analysts, developers, and users who need to evaluate the impact of specific flaws on their workflows or ensure their installation remains free from critical exploits. The information presented is derived from publicly available databases and official security notices, providing a neutral and factual overview of the threats that have historically impacted this widely used image manipulation tool without endorsing or promoting any particular security solution.

Vendor: GIMP

CVE IDTitleCVSSSeverityPublished
CVE-2026-66759 Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images CWE-125 7.1 High2026-07-27
CVE-2026-66758 Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images CWE-190 7.8 High2026-07-27
CVE-2026-66757 Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images CWE-190 5.5 Medium2026-07-27
CVE-2026-2050 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122--2026-06-24
CVE-2026-2049 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122--2026-06-10
CVE-2026-4154 GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2026-04-11
CVE-2026-4153 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-04-11
CVE-2026-4152 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-04-11
CVE-2026-4151 GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2026-04-11
CVE-2026-4150 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2026-04-11
CVE-2026-2048 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2026-02-20
CVE-2026-2047 GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-02-20
CVE-2026-2045 GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2026-02-20
CVE-2026-2044 GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability CWE-908 7.8AIHighAI2026-02-20
CVE-2026-0797 GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2026-02-20
CVE-2025-15059 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8 -2026-01-23
CVE-2025-14425 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-12-23
CVE-2025-14424 GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability CWE-416 7.8AIHighAI2025-12-23
CVE-2025-14423 GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 7.8AIHighAI2025-12-23
CVE-2025-14422 GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-12-23
CVE-2025-10934 GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-10-29
CVE-2025-10925 GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 7.8AIHighAI2025-10-29
CVE-2025-10924 GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-10-29
CVE-2025-10923 GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-10-29
CVE-2025-10922 GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-10-29
CVE-2025-10921 GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AIHighAI2025-10-29
CVE-2025-10920 GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2025-10-29
CVE-2025-8672 TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app CWE-276 6.6AIMediumAI2025-08-11
CVE-2025-5473 GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability CWE-190 7.8AIHighAI2025-06-06
CVE-2025-2761 GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8 -2025-04-23

All 35 known CVE vulnerabilities affecting GIMP with full Chinese analysis, references, and POCs where available.