GIMP kayıtları
gimp üreticisine ait 110 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %0,9
- Pre-auth RCE
- 26
- Düzeltme kaydı olan
- %98,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-190 Integer Overflow or Wraparound36
- CWE-787 Out-of-bounds Write21
- CWE-122 Heap-based Buffer Overflow14
- CWE-125 Out-of-bounds Read11
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')5
- CWE-121 Stack-based Buffer Overflow3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
110 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
59Planlayın | CVE-2023-44443İstismar yok | GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 | Yüksek7,8 | — | %93,6 | 2 May 2024 |
55Planlayın | CVE-2012-2763Silahlaştırılmış | Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allogimp · gimp · CWE-120 | Yüksek7,5 | — | %81,7 | 12 Tem 2012 |
49Planlayın | CVE-2023-44442İstismar yok | GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-122 | Yüksek7,8 | — | %61,4 | 2 May 2024 |
48Planlayın | CVE-2023-44444İstismar yok | GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerabilitygimp · gimp · CWE-193 | Yüksek7,8 | — | %56,4 | 2 May 2024 |
42Planlayın | CVE-2025-5473İstismar yok | GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 | Yüksek8,8 | — | %23,5 | 6 Haz 2025 |
40Planlayın | CVE-2009-3909İstismar yok | Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbgimp · gimp · CWE-190 | Kritik9,3 | — | %8,7 | 18 Kas 2009 |
39İzleyin | CVE-2023-44441İstismar yok | GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-122 | Yüksek7,8 | — | %27,3 | 2 May 2024 |
39İzleyin | CVE-2009-1570İstismar yok | Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary cgimp · gimp · CWE-190 | Kritik9,3 | — | %8,0 | 13 Kas 2009 |
39İzleyin | CVE-2010-4541İstismar yok | Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows gimp · gimp · CWE-787 | Kritik9,3 | — | %6,8 | 7 Oca 2011 |
39İzleyin | CVE-2009-0733İstismar yok | Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefolittlecms · little cms · CWE-787 | Kritik9,3 | — | %5,5 | 23 Mar 2009 |
39İzleyin | CVE-2009-0723İstismar yok | Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow contextgimp · gimp · CWE-190 | Kritik9,3 | — | %5,0 | 23 Mar 2009 |
39İzleyin | CVE-2026-59090İstismar yok | Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflowgimp · gimp · CWE-191 | Kritik9,9 | — | %0,6 | 10 Ağu 2026 |
37İzleyin | CVE-2025-2760İstismar yok | GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 | Yüksek7,8 | — | %18,8 | 23 Nis 2025 |
37İzleyin | CVE-2018-12713İstismar yok | GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demongimp · gimp | Kritik9,1 | — | %1,9 | 24 Haz 2018 |
35İzleyin | CVE-2010-4543Kavram kanıtı | Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote agimp · gimp · CWE-787 | Yüksek7,5 | — | %16,3 | 7 Oca 2011 |
35İzleyin | CVE-2026-0797İstismar yok | GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-122 | Yüksek8,8 | — | %1,2 | 20 Şub 2026 |
35İzleyin | CVE-2026-2044İstismar yok | GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerabilitygimp · gimp · CWE-908 | Yüksek8,8 | — | %1,0 | 20 Şub 2026 |
32İzleyin | CVE-2007-2356Kavram kanıtı | Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attagimp · gimp · CWE-787 | Orta6,8 | — | %15,7 | 30 Nis 2007 |
32İzleyin | CVE-2012-5576İstismar yok | Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a deniagimp · gimp · CWE-787 | Yüksek7,5 | — | %6,8 | 17 Ara 2012 |
32İzleyin | CVE-2016-4994İstismar yok | Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of servigimp · gimp · CWE-416 | Yüksek7,8 | — | %3,1 | 12 Tem 2016 |
32İzleyin | CVE-2025-10925İstismar yok | GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-121 | Yüksek7,8 | — | %3,1 | 29 Eki 2025 |
32İzleyin | CVE-2025-2761İstismar yok | GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitygimp · gimp · CWE-787 | Yüksek7,8 | — | %2,9 | 23 Nis 2025 |
32İzleyin | CVE-2017-17789İstismar yok | In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.gimp · gimp · CWE-787 | Yüksek7,8 | — | %2,0 | 20 Ara 2017 |
31İzleyin | CVE-2011-1782İstismar yok | Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote agimp · gimp · CWE-787 | Yüksek7,5 | — | %3,4 | 26 Tem 2011 |
31İzleyin | CVE-2017-17784İstismar yok | In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mishgimp · gimp · CWE-125 | Yüksek7,8 | — | %1,5 | 20 Ara 2017 |
- CVE-2023-4444359Planlayın
GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %94gimp · gimp2 May 2024
- CVE-2012-276355Planlayın
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allo
YüksekCVSS 7,5SilahlaştırılmışEPSS %82gimp · gimp12 Tem 2012
- CVE-2023-4444249Planlayın
GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %61gimp · gimp2 May 2024
- CVE-2023-4444448Planlayın
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %56gimp · gimp2 May 2024
- CVE-2025-547342Planlayın
GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %23gimp · gimp6 Haz 2025
- CVE-2009-390940Planlayın
Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arb
KritikCVSS 9,3İstismar yokEPSS %9gimp · gimp18 Kas 2009
- CVE-2023-4444139İzleyin
GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %27gimp · gimp2 May 2024
- CVE-2009-157039İzleyin
Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary c
KritikCVSS 9,3İstismar yokEPSS %8gimp · gimp13 Kas 2009
- CVE-2010-454139İzleyin
Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows
KritikCVSS 9,3İstismar yokEPSS %7gimp · gimp7 Oca 2011
- CVE-2009-073339İzleyin
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefo
KritikCVSS 9,3İstismar yokEPSS %6littlecms · little cms23 Mar 2009
- CVE-2009-072339İzleyin
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context
KritikCVSS 9,3İstismar yokEPSS %5gimp · gimp23 Mar 2009
- CVE-2026-5909039İzleyin
Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow
KritikCVSS 9,9İstismar yokEPSS %1gimp · gimp10 Ağu 2026
- CVE-2025-276037İzleyin
GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %19gimp · gimp23 Nis 2025
- CVE-2018-1271337İzleyin
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demon
KritikCVSS 9,1İstismar yokEPSS %2gimp · gimp24 Haz 2018
- CVE-2010-454335İzleyin
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote a
YüksekCVSS 7,5Kavram kanıtıEPSS %16gimp · gimp7 Oca 2011
- CVE-2026-079735İzleyin
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1gimp · gimp20 Şub 2026
- CVE-2026-204435İzleyin
GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1gimp · gimp20 Şub 2026
- CVE-2007-235632İzleyin
Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote atta
OrtaCVSS 6,8Kavram kanıtıEPSS %16gimp · gimp30 Nis 2007
- CVE-2012-557632İzleyin
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denia
YüksekCVSS 7,5İstismar yokEPSS %7gimp · gimp17 Ara 2012
- CVE-2016-499432İzleyin
Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of servi
YüksekCVSS 7,8İstismar yokEPSS %3gimp · gimp12 Tem 2016
- CVE-2025-1092532İzleyin
GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %3gimp · gimp29 Eki 2025
- CVE-2025-276132İzleyin
GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %3gimp · gimp23 Nis 2025
- CVE-2017-1778932İzleyin
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
YüksekCVSS 7,8İstismar yokEPSS %2gimp · gimp20 Ara 2017
- CVE-2011-178231İzleyin
Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote a
YüksekCVSS 7,5İstismar yokEPSS %3gimp · gimp26 Tem 2011
- CVE-2017-1778431İzleyin
In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import parser, related to mish
YüksekCVSS 7,8İstismar yokEPSS %1gimp · gimp20 Ara 2017