CVE-2016-4994High · CVSS 7.8EPSS 3.11%Fix availableCVE-2016-4994Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.gimpOperating systemsUpdate to 2.8.16-1ubuntu1.1Published July 12, 2016Updated August 6, 2024Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗