This update for gimp fixes the following issues:
- CVE-2026-2044: lack of proper initialization of memory can allow remote attackers to execute arbitrary code
(bsc#1258532).
- CVE-2026-2045: check offset in the colormap is valid before using it (bsc#1258533).
- CVE-2026-2048: lack of proper validation of user-supplied data can allow remote attackers to execute arbitrary code
(bsc#1258535).
This update for gimp fixes the following issues:
- CVE-2026-2272: integer overflow in ICO file handling can lead to a heap buffer overflow (bsc#1258000).
- CVE-2026-2271: integer overflow in the PSP file parser can lead to a heap buffer overflow (bsc#1257999).
- CVE-2026-2239: missing null terminator when processing a specially crafted PSD file can lead to a heap buffer
overflow and an application crash (bsc#1257959).
This update for gimp fixes the following issues:
- CVE-2025-14422: Fixed RCE vulnerability due to PNM file parsing integer overflow (bsc#1255293)
- CVE-2025-14425: Fixed RCE vulnerability due to JP2 file parsing heap-based buffer overflow (bsc#1255296)
This update for gimp fixes the following issues:
- CVE-2025-15059: Fixed Heap-based Buffer Overflow Remote Code Execution Vulnerability in GIMP PSP File Parsing (bsc#1255766).
This update for gimp fixes the following issues:
- CVE-2025-2760: lack of proper validation of user-supplied data in DDS parser can lead to integer overflow and remote
code execution (bsc#1241690).
This update for gimp fixes the following issues:
- CVE-2025-48797: Fixed two buffer over-reads and one heap-based buffer overflow in its TGA parser (bsc#1243711).
- CVE-2025-48798: Fixed two use-after-free bugs and one double free bug in its XCF parser (bsc#1243712).
This update for gimp fixes the following issues:
- CVE-2025-2761: unvalidated user input in FLI file parsing may lead to an out-of-bounds write (bsc#1241691).