Critical Security Update for GIMP: Addressing Stack Buffer Overflow and Integer Overflow Vulnerabilities
Summary
ALSA-2026:40751: Important: gimp security update. Affects gimp versions < 2:3.0.4-4.el9_8.7. Fixed in 2:3.0.4-4.el9_8.7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a powerful open-source image composition and editing tool widely used for tasks such as photo retouching, image editing, and graphic design. It offers a comprehensive toolbox that includes features like layers, effects, and multi-level undo. However, recent vulnerabilities have been identified that could potentially compromise the security of the application, making it crucial for users to stay updated.
Vulnerability Detail
The vulnerabilities in GIMP stem from a stack buffer overflow in the pnmscanner_gettoken() function and an integer overflow in the read_RLE_channel() function. These issues could allow an attacker to execute arbitrary code or cause a denial of service, posing significant risks to users and their data. The vulnerabilities are tracked under CVE-2026-58380 and CVE-2026-58384, respectively.
How To Fix
Minimum fixed version
2:3.0.4-4.el9_8.7
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to avoid opening untrusted image files that may exploit these vulnerabilities until the update is applied.
Conclusion
In summary, the recent vulnerabilities in GIMP pose significant security risks that users must address promptly. By updating to the latest patched version, users can protect themselves from potential exploits. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for vulnerabilities.
See every vulnerability recorded for gimp →
FAQ
The vulnerabilities include a stack buffer overflow in pnmscanner_gettoken() and an integer overflow in read_RLE_channel(), which could lead to arbitrary code execution or denial of service.
You can use tools like Vulert, which monitors open-source vulnerabilities in your software. Simply upload your manifest file to check for vulnerabilities.
As a workaround, avoid opening untrusted image files until you can apply the update to mitigate the risk of exploitation.
Detailed information can be found on the CVE pages for CVE-2026-58380 and CVE-2026-58384, which provide insights into the vulnerabilities and their impacts.
Yes, Vulert allows you to monitor and alert for open-source vulnerabilities in your software using just a manifest file like package-lock.json, without requiring any code access.
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
