[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWN8c78mYFbKHVFLnH-cWc4xe0m_JwAkQplDC3KbPqKI":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":78,"topProductsByCves":79,"seoMetadata":81,"meta":90},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},12194,"gimp",1,47,0,209,"2025-08-11","g",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},50200,"Gimp is a technology vendor with 1 tracked product and 47 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,40,44,48,55,60,65,72],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2023-44443","GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process.\n. Was ZDI-CAN-22096.","2024-05-03",7.8,"v3.0","High",false,0.93639,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":35},"CVE-2012-2763","Buffer overflow in the readstr_upto function in plug-ins\u002Fscript-fu\u002Ftinyscheme\u002Fscheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.","2012-07-12",7.5,"v2",0.81722,{"cveId":37,"description":38,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":39},"CVE-2023-44442","GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-CAN-22094.",0.61167,{"cveId":41,"description":42,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":43},"CVE-2023-44444","GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.\n. Was ZDI-CAN-22097.",0.56129,{"cveId":45,"description":46,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":47},"CVE-2023-44441","GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.\n. Was ZDI-CAN-22093.",0.27307,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":26,"isKev":27,"epssScore":54},"CVE-2025-5473","GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26752.","2025-06-06",8.8,"v3.1",0.23483,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":24,"cvssVersion":53,"severity":26,"isKev":27,"epssScore":59},"CVE-2025-2760","GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25082.","2025-04-23",0.18759,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":64},"CVE-2010-4543","Heap-based buffer overflow in the read_channel_data function in file-psp.c in the Paint Shop Pro (PSP) plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a PSP_COMP_RLE (aka RLE compression) image file that begins a long run count at the end of the image.  NOTE: some of these details are obtained from third party information.","2011-01-07",0.16273,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":34,"severity":70,"isKev":27,"epssScore":71},"CVE-2007-2356","Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote attackers to execute arbitrary code via a crafted RAS file.","2007-04-30",6.8,"Medium",0.15674,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":34,"severity":70,"isKev":27,"epssScore":77},"CVE-2011-2896","The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in PBMPLUS, as used in the gif_read_lzw function in filter\u002Fimage-gif.c in CUPS before 1.4.7, the LZWReadByte function in plug-ins\u002Fcommon\u002Ffile-gif-load.c in GIMP 2.6.11 and earlier, the LZWReadByte function in img\u002Fgifread.c in XPCE in SWI-Prolog 5.10.4 and earlier, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows remote attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2895.","2011-08-19",5.1,0.11993,[],[80],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":82,"metaDescription":83,"keywords":84,"structuredData":85},"Gimp - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gimp covering 1 product with 47 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Gimp vulnerabilities, Gimp security, Gimp CVE, Gimp threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":86,"@type":87,"name":88,"description":83,"url":89},"https:\u002F\u002Fschema.org","Organization","Gimp","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fgimp",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":91,"apiVersion":92},"2026-10-17T20:28:25.760Z","3.0"]