Search for vulnerabilities
Vulnerability details: VCID-adhn-ctqy-aaak
Vulnerability ID VCID-adhn-ctqy-aaak
Aliases CVE-2016-4994
Summary Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted XCF file.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-4994.html
rhas Moderate https://access.redhat.com/errata/RHSA-2016:2589
cvssv3 2.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4994.json
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00278 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.00538 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02101 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02101 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02101 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02101 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
epss 0.02541 https://api.first.org/data/v1/epss?cve=CVE-2016-4994
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=1348617
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4994
cvssv2 5.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2016-4994
cvssv3 7.8 https://nvd.nist.gov/vuln/detail/CVE-2016-4994
cvssv3.1 7.8 https://nvd.nist.gov/vuln/detail/CVE-2016-4994
generic_textual Medium https://ubuntu.com/security/notices/USN-3025-1
Reference id Reference type URL
http://lists.opensuse.org/opensuse-updates/2016-07/msg00005.html
http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-4994.html
http://rhn.redhat.com/errata/RHSA-2016-2589.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4994.json
https://api.first.org/data/v1/epss?cve=CVE-2016-4994
https://bugzilla.gnome.org/show_bug.cgi?id=767873
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4994
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://git.gnome.org/browse/gimp/commit/?id=e82aaa4b4ee0703c879e35ea9321fff6be3e9b6f
https://ubuntu.com/security/notices/USN-3025-1
http://www.debian.org/security/2016/dsa-3612
http://www.securityfocus.com/bid/91425
http://www.securitytracker.com/id/1036226
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.431987
http://www.ubuntu.com/usn/USN-3025-1
1348617 https://bugzilla.redhat.com/show_bug.cgi?id=1348617
828179 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=828179
cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*
CVE-2016-4994 https://nvd.nist.gov/vuln/detail/CVE-2016-4994
RHSA-2016:2589 https://access.redhat.com/errata/RHSA-2016:2589
USN-3025-1 https://usn.ubuntu.com/3025-1/
No exploits are available.
Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4994.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2016-4994
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2016-4994
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2016-4994
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.48263
EPSS Score 0.00278
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.