6.1 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): NONE
- Availability impact (A): HIGH
by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
29 packages
- zigimports
- gimpPlugins.bimp
- gimpPlugins.gimp
- gimpPlugins.gmic
- gimp-with-plugins
- gimp2Plugins.bimp
- gimp2Plugins.gimp
- gimp2Plugins.gmic
- gimp3Plugins.gimp
- gimp3Plugins.gmic
- gimp2-with-plugins
- gimp3-with-plugins
- gimpPlugins.fourier
- gimp2Plugins.fourier
- gimpPlugins.farbfeld
- gimp2Plugins.farbfeld
- gimpPlugins.lightning
- gimpPlugins.lqrPlugin
- gimpPlugins.texturize
- gimp2Plugins.lightning
- gimp2Plugins.lqrPlugin
- gimp2Plugins.texturize
- gimp3Plugins.lightning
- gimpPlugins.gimplensfun
- gimp2Plugins.gimplensfun
- gimpPlugins.resynthesizer
- gimp3
- gimpPlugins.waveletSharpen
- gimp2Plugins.waveletSharpen
- @LeSuisse added package gimp3
- @LeSuisse accepted
- @LeSuisse published on GitHub
Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).
References
- https://access.redhat.com/security/cve/CVE-2026-4887 x_refsource_REDHAT vdb-entry
- RHBZ#2451669 issue-tracking x_refsource_REDHAT
- https://gitlab.gnome.org/GNOME/gimp/-/issues/15960
Affected products
Matching in nixpkgs
Ignored packages (28)
pkgs.zigimports
Automatically remove unused imports and globals from Zig files
pkgs.gimpPlugins.bimp
Batch Image Manipulation Plugin for GIMP
pkgs.gimpPlugins.gimp
GNU Image Manipulation Program
pkgs.gimpPlugins.gmic
GIMP plugin for the G'MIC image processing framework
pkgs.gimp-with-plugins
GNU Image Manipulation Program
pkgs.gimp2Plugins.bimp
Batch Image Manipulation Plugin for GIMP
pkgs.gimp2Plugins.gimp
GNU Image Manipulation Program
pkgs.gimp2Plugins.gmic
GIMP plugin for the G'MIC image processing framework
pkgs.gimp3Plugins.gimp
GNU Image Manipulation Program
pkgs.gimp3Plugins.gmic
GIMP plugin for the G'MIC image processing framework
pkgs.gimp2-with-plugins
GNU Image Manipulation Program
pkgs.gimp3-with-plugins
GNU Image Manipulation Program
pkgs.gimpPlugins.fourier
GIMP plug-in to do the fourier transform
pkgs.gimp2Plugins.fourier
GIMP plug-in to do the fourier transform
pkgs.gimpPlugins.farbfeld
Gimp plug-in for the farbfeld image format
pkgs.gimp2Plugins.farbfeld
Gimp plug-in for the farbfeld image format
-
nixos-unstable 2019-08-12
- nixpkgs-unstable 2019-08-12
- nixos-unstable-small 2019-08-12
-
nixos-25.11 2019-08-12
- nixos-25.11-small 2019-08-12
- nixpkgs-25.11-darwin 2019-08-12
pkgs.gimpPlugins.lightning
None
pkgs.gimpPlugins.lqrPlugin
None
pkgs.gimpPlugins.texturize
None
pkgs.gimp2Plugins.lightning
None
pkgs.gimp2Plugins.lqrPlugin
None
pkgs.gimp2Plugins.texturize
None
-
nixos-unstable 2.2+unstable=2021-12-03
- nixpkgs-unstable 2.2+unstable=2021-12-03
- nixos-unstable-small 2.2+unstable=2021-12-03
-
nixos-25.11 2.2+unstable=2021-12-03
- nixos-25.11-small 2.2+unstable=2021-12-03
- nixpkgs-25.11-darwin 2.2+unstable=2021-12-03
pkgs.gimp3Plugins.lightning
None
pkgs.gimpPlugins.gimplensfun
GIMP plugin to correct lens distortion using the lensfun library and database
pkgs.gimp2Plugins.gimplensfun
GIMP plugin to correct lens distortion using the lensfun library and database
-
nixos-unstable 2018-10-21
- nixpkgs-unstable 2018-10-21
- nixos-unstable-small 2018-10-21
-
nixos-25.11 2018-10-21
- nixos-25.11-small 2018-10-21
- nixpkgs-25.11-darwin 2018-10-21
pkgs.gimpPlugins.resynthesizer
None
pkgs.gimpPlugins.waveletSharpen
None
Package maintainers
-
@jtojnar Jan Tojnar <jtojnar@gmail.com>