Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=4
purl pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=4
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-1p16-e8n6-1qcg
Aliases:
CVE-2026-2047
gimp: GIMP: Remote code execution via heap-based buffer overflow in ICNS file parsing There are no reported fixed by versions.
VCID-1w47-u2aa-8uaj
Aliases:
CVE-2026-2045
gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing There are no reported fixed by versions.
VCID-jy45-8uuz-y7bf
Aliases:
CVE-2026-0797
gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability There are no reported fixed by versions.
VCID-rraw-1e9t-x3f3
Aliases:
CVE-2026-2048
gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability There are no reported fixed by versions.
VCID-ubet-venh-tqct
Aliases:
CVE-2026-2044
gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:31:21.429301+00:00 RedHat Importer Affected by VCID-jy45-8uuz-y7bf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-0797.json 38.0.0
2026-04-01T13:31:21.252147+00:00 RedHat Importer Affected by VCID-ubet-venh-tqct https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2044.json 38.0.0
2026-04-01T13:31:21.092401+00:00 RedHat Importer Affected by VCID-1w47-u2aa-8uaj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2045.json 38.0.0
2026-04-01T13:31:20.964669+00:00 RedHat Importer Affected by VCID-1p16-e8n6-1qcg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2047.json 38.0.0
2026-04-01T13:31:20.908370+00:00 RedHat Importer Affected by VCID-rraw-1e9t-x3f3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-2048.json 38.0.0