en
GIMP, the GNU Image Manipulation Program, is a community-developed free and open-source image editor. It supports photo retouching, image composition, image authoring, plug-ins, extensions, and many image formats. GIMP is delivered as a cross-platform desktop application for users including photographers, designers, illustrators, and scientists.
As of 09/13/2026, GIMP recorded 11 security vulnerabilities in the last 90 days across 1 products, including 11 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, GIMP had the most security vulnerabilities in the GIMP ecosystem, with 11 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-82343Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-82330Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-82328Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-82324Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0 | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/28/2026 | SeverityMedium |
CVE-2026-79902Gimp: stack vla size underflow denial of service in seattle | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/26/2026 | SeverityMedium |
CVE-2026-80101Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/25/2026 | SeverityMedium |
CVE-2026-78475Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/24/2026 | SeverityMedium |
CVE-2026-78465Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published08/24/2026 | SeverityHigh |
CVE-2026-18309GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18308GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18307GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18306GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18305GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18304GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18303GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18302GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18301GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-18300GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published08/20/2026 | SeverityHigh |
CVE-2026-59091Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file | Exploitation statusNot known exploited | FixNot confirmed | Affected productgimp | Published08/10/2026 | SeverityHigh |
CVE-2026-59090Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 9 | Published08/10/2026 | SeverityHigh |
CVE-2026-59088Gimp: gimp: denial of service via signed integer overflow in fli file processing | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published08/10/2026 | SeverityMedium |
CVE-2026-59087Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation | Exploitation statusNot known exploited | FixNot confirmed | Affected productgimp | Published08/10/2026 | SeverityHigh |
CVE-2026-6695Gimp: gimp: remote code execution via crafted paa file | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published08/03/2026 | SeverityMedium |
CVE-2026-66759Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published07/27/2026 | SeverityHigh |
CVE-2026-66757Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images | Exploitation statusPublic exploit | FixNot confirmed | Affected productGIMP | Published07/27/2026 | SeverityMedium |
CVE-2026-66758Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published07/27/2026 | SeverityHigh |
CVE-2026-58384Gimp: gimp: integer overflow in read_rle_channel() | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 9 | Published07/07/2026 | SeverityHigh |
CVE-2026-59089Gimp: gimp: denial of service via integer overflow in playstation tim loader | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/06/2026 | SeverityMedium |
CVE-2026-58380Gimp: gimp: stack buffer overflow in pnmscanner_gettoken() | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published07/06/2026 | SeverityHigh |
CVE-2026-2050GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published06/24/2026 | SeverityHigh |
CVE-2026-2049GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published06/10/2026 | SeverityHigh |
CVE-2026-6384Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published04/15/2026 | SeverityHigh |
CVE-2026-40919Gimp: gimp: denial of service via specially crafted seattle filmworks file | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published04/15/2026 | SeverityMedium |
CVE-2026-40918Gimp: gimp: denial of service via crafted pvr image file | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published04/15/2026 | SeverityMedium |
CVE-2026-40917Gimp: gimp: application crashes or information disclosure via crafted icns image files | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published04/15/2026 | SeverityMedium |
CVE-2026-40916Gimp: gimp: denial of service due to stack buffer overflow in tim image loader | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published04/15/2026 | SeverityMedium |
CVE-2026-40915Gimp: gimp: heap buffer overflow due to integer overflow in fits image loader | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 6 | Published04/15/2026 | SeverityMedium |
CVE-2026-4154GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/11/2026 | SeverityHigh |
CVE-2026-4153GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/11/2026 | SeverityHigh |
CVE-2026-4152GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/11/2026 | SeverityHigh |
CVE-2026-4151GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/11/2026 | SeverityHigh |
CVE-2026-4150GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/11/2026 | SeverityHigh |
CVE-2026-2239Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published03/26/2026 | SeverityLow |
CVE-2026-2272Gimp: gimp: memory corruption due to integer overflow in ico file handling | Exploitation statusPublic exploit | FixNot confirmed | Affected productRed Hat Enterprise Linux 7 | Published03/26/2026 | SeverityMedium |
CVE-2026-2271Gimp: gimp: denial of service via crafted psp image file | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 7 | Published03/26/2026 | SeverityLow |
CVE-2026-4887Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 7 Extended Lifecycle Support | Published03/26/2026 | SeverityMedium |
CVE-2026-2048GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published02/20/2026 | SeverityHigh |
CVE-2026-2047GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published02/20/2026 | SeverityHigh |
CVE-2026-2045GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published02/20/2026 | SeverityHigh |
CVE-2026-2044GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published02/20/2026 | SeverityHigh |
CVE-2026-0797GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published02/20/2026 | SeverityHigh |
CVE-2025-15059GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published01/23/2026 | SeverityHigh |
CVE-2025-14425GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published12/23/2025 | SeverityHigh |
CVE-2025-14424GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published12/23/2025 | SeverityHigh |
CVE-2025-14423GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published12/23/2025 | SeverityHigh |
CVE-2025-14422GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published12/23/2025 | SeverityHigh |
CVE-2025-10934GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-10925GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-10924GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-10923GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-10922GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-10921GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-10920GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published10/29/2025 | SeverityHigh |
CVE-2025-8672TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app | Exploitation statusNot known exploited | FixYes | Affected productGIMP | Published08/11/2025 | SeverityMedium |
CVE-2025-6035Gimp: gimp integer overflow | Exploitation statusNot known exploited | FixYes | Affected productgimp | Published06/13/2025 | SeverityMedium |
CVE-2025-5473GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published06/06/2025 | SeverityHigh |
CVE-2025-2761GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/23/2025 | SeverityHigh |
CVE-2025-2760GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published04/23/2025 | SeverityHigh |
CVE-2023-44444GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published05/03/2024 | SeverityHigh |
CVE-2023-44443GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published05/03/2024 | SeverityHigh |
CVE-2023-44442GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published05/03/2024 | SeverityHigh |
CVE-2023-44441GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productGIMP | Published05/03/2024 | SeverityHigh |
CVE-2022-32990 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/24/2022 | SeverityUnknown |
CVE-2022-30067 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/17/2022 | SeverityUnknown |
CVE-2021-45463 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/23/2021 | SeverityUnknown |
CVE-2018-12713 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/24/2018 | SeverityUnknown |
CVE-2017-17784 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2017 | SeverityUnknown |
CVE-2017-17787 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2017 | SeverityUnknown |
CVE-2017-17786 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2017 | SeverityUnknown |
CVE-2017-17785 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2017 | SeverityUnknown |
CVE-2017-17789 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2017 | SeverityUnknown |
CVE-2017-17788 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/20/2017 | SeverityUnknown |
CVE-2016-4994 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/12/2016 | SeverityUnknown |
CVE-2013-1978 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/12/2013 | SeverityUnknown |
CVE-2013-1913 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/12/2013 | SeverityUnknown |
CVE-2012-5576 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/18/2012 | SeverityUnknown |
CVE-2012-4245 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/31/2012 | SeverityUnknown |
CVE-2012-3402 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/25/2012 | SeverityUnknown |
CVE-2012-3403 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/25/2012 | SeverityUnknown |
CVE-2012-3481 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/25/2012 | SeverityUnknown |
CVE-2012-3236 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published07/12/2012 | SeverityUnknown |
CVE-2012-2763 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/12/2012 | SeverityUnknown |
CVE-2011-2896 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/19/2011 | SeverityUnknown |
CVE-2011-1782 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/27/2011 | SeverityUnknown |
CVE-2011-1178 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published06/06/2011 | SeverityUnknown |
CVE-2010-4543 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/07/2011 | SeverityUnknown |
CVE-2010-4542 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/07/2011 | SeverityUnknown |
CVE-2010-4540 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/07/2011 | SeverityUnknown |
CVE-2010-4541 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/07/2011 | SeverityUnknown |
CVE-2009-3909 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published11/19/2009 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
