Critical Security Flaws in GIMP: Remote Code Execution and Buffer Overflow Vulnerabilities
Summary
ALSA-2026:62507: Important: gimp:2.8 security update. Affects gimp versions < 2:2.8.22-26.module_el8.10.0+4267+35168c80.8. Fixed in 2:2.8.22-26.module_el8.10.0+4267+35168c80.8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a widely used open-source image editing software that provides a comprehensive toolbox for image manipulation, including features like layers, effects, and multi-level undo. Despite its robust capabilities, GIMP has been found to have several security vulnerabilities that could potentially allow attackers to execute arbitrary code or cause application crashes, particularly when handling specially crafted image files.
Vulnerability Detail
The vulnerabilities in GIMP stem from multiple issues, including stack buffer overflows and integer overflows in various image file parsers. Specifically, the pnmscanner_gettoken() function is susceptible to a stack buffer overflow, while the file-fits plugin can lead to a heap-based buffer overflow when processing crafted FITS images. Additionally, several vulnerabilities related to TIF and PSD file parsing could allow remote code execution, posing significant risks to users who open malicious files.
How To Fix
Minimum fixed version
2:2.8.22-26.module_el8.10.0+4267+35168c80.8
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, avoid opening untrusted image files, especially those in TIF and PSD formats, until the software is updated. Additionally, consider using alternative image editing software that does not have these vulnerabilities.
Conclusion
The identified vulnerabilities in GIMP pose significant risks, particularly through remote code execution and buffer overflow attacks. It is crucial for users to update their software to the latest patched versions to safeguard against these threats. Utilizing tools like Vulert can further enhance security by providing real-time monitoring of vulnerabilities.
See every vulnerability recorded for gimp →
FAQ
The vulnerabilities include stack buffer overflows and integer overflows that can lead to remote code execution when processing malicious image files.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
If an immediate update is not possible, refrain from opening any untrusted image files, particularly those in vulnerable formats like TIF and PSD.
Yes, updating to version 2:2.8.22-26.module_el8.10.0+4267+35168c80 or later will mitigate the vulnerabilities.
Vulert is a tool that monitors and alerts users about open-source vulnerabilities in their software by analyzing a manifest file like package-lock.json. It provides real-time alerts for vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
