Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/gimp@3.2.4-2
purl pkg:deb/debian/gimp@3.2.4-2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (5)
Vulnerability Summary Aliases
VCID-4her-sras-4uhg CVE-2025-10925
VCID-d1rw-etzn-37bs CVE-2026-4887
VCID-eyyg-rjw2-bkau CVE-2026-2046
VCID-mqa4-pepu-53gz A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful exploitation could result in a denial of service (DoS) or potentially arbitrary code execution. CVE-2026-40915
VCID-wupj-s4k2-h7d5 CVE-2026-4154

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T02:12:15.972990+00:00 Debian Importer Fixing VCID-d1rw-etzn-37bs https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T01:51:45.505003+00:00 Debian Importer Fixing VCID-eyyg-rjw2-bkau https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T01:39:04.086491+00:00 Debian Importer Fixing VCID-mqa4-pepu-53gz https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:38:11.987148+00:00 Debian Importer Fixing VCID-wupj-s4k2-h7d5 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:35:15.941107+00:00 Debian Importer Fixing VCID-4her-sras-4uhg https://security-tracker.debian.org/tracker/data/json 38.6.0