ALT-PU-2026-16735-2

Package update gimp in branch c10f2

Version2.10.38-alt5

Published2026-09-29

Max severityMEDIUM

Severity:

Closed issues (2)

MEDIUM6.5

Уязвимость функции fread_pascal_string() файла plug-ins/file-psd/psd-util.c библиотеки для обработки изображений Gimp, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код

Published: 2026-08-19Modified: 2026-09-22

CVSS 3.xMEDIUM 6.5

CVSS:3.x/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS 2.0HIGH 7.8

CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:C

References

MEDIUM6.5

A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an out-of-bounds read when strlen() is subsequently called. Successfully exploiting this vulnerability can cause the application to crash, resulting in an application level Denial of Service.

Published: 2026-03-26Modified: 2026-06-17

CVSS 3.xMEDIUM 6.5

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References