An update for gimp is now available for openEuler-24.03-LTS-SP3 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3610 Final 1.0 1.0 2026-09-05 Initial 2026-09-05 2026-09-05 openEuler SA Tool V1.0 2026-09-05 gimp security update An update for gimp is now available for openEuler-24.03-LTS-SP3 The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute. Security Fix(es): A vulnerability classified as critical has been found in GIMP (Image Processing Software). The issue is categorized as CWE-120 (Buffer Overflow). The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. This vulnerability impacts confidentiality, integrity, and availability.(CVE-2026-18307) A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the real format's stride causes a write past the heap buffer boundary, leading to heap metadata corruption and potential code execution.(CVE-2026-42170) A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently large dimensions, the calculation exceeds the 32-bit integer limit and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when the plugin subsequently writes image data into the undersized buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.(CVE-2026-78465) A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a denial of service due to stack exhaustion and a limited information disclosure of stack memory contents into an intermediate file.(CVE-2026-78475) A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation leads to improper bounds checking, causing a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service, or a limited information disclosure of heap memory contents into the produced image.(CVE-2026-80101) An update for gimp is now available for openEuler-24.03-LTS-SP3. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High gimp https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3610 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-18307 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-42170 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-78465 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-78475 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-80101 https://nvd.nist.gov/vuln/detail/CVE-2026-18307 https://nvd.nist.gov/vuln/detail/CVE-2026-42170 https://nvd.nist.gov/vuln/detail/CVE-2026-78465 https://nvd.nist.gov/vuln/detail/CVE-2026-78475 https://nvd.nist.gov/vuln/detail/CVE-2026-80101 openEuler-24.03-LTS-SP3 gimp-3.0.2-20.oe2403sp3.aarch64.rpm gimp-debuginfo-3.0.2-20.oe2403sp3.aarch64.rpm gimp-debugsource-3.0.2-20.oe2403sp3.aarch64.rpm gimp-devel-3.0.2-20.oe2403sp3.aarch64.rpm gimp-extension-goat-excercises-3.0.2-20.oe2403sp3.aarch64.rpm gimp-libs-3.0.2-20.oe2403sp3.aarch64.rpm gimp-plugin-aa-3.0.2-20.oe2403sp3.aarch64.rpm gimp-plugin-python3-3.0.2-20.oe2403sp3.aarch64.rpm gimp-vala-3.0.2-20.oe2403sp3.aarch64.rpm gimp-3.0.2-20.oe2403sp3.src.rpm gimp-3.0.2-20.oe2403sp3.x86_64.rpm gimp-debuginfo-3.0.2-20.oe2403sp3.x86_64.rpm gimp-debugsource-3.0.2-20.oe2403sp3.x86_64.rpm gimp-devel-3.0.2-20.oe2403sp3.x86_64.rpm gimp-extension-goat-excercises-3.0.2-20.oe2403sp3.x86_64.rpm gimp-libs-3.0.2-20.oe2403sp3.x86_64.rpm gimp-plugin-aa-3.0.2-20.oe2403sp3.x86_64.rpm gimp-plugin-python3-3.0.2-20.oe2403sp3.x86_64.rpm gimp-vala-3.0.2-20.oe2403sp3.x86_64.rpm A vulnerability classified as critical has been found in GIMP (Image Processing Software). The issue is categorized as CWE-120 (Buffer Overflow). The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. This vulnerability impacts confidentiality, integrity, and availability. 2026-09-05 CVE-2026-18307 openEuler-24.03-LTS-SP3 High 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H gimp security update 2026-09-05 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3610 A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel format but sets a lower bits-per-pixel (bpp) value in the header, the loader allocates an undersized heap buffer. Subsequent pixel data consumption at the real format's stride causes a write past the heap buffer boundary, leading to heap metadata corruption and potential code execution. 2026-09-05 CVE-2026-42170 openEuler-24.03-LTS-SP3 High 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H gimp security update 2026-09-05 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3610 A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently large dimensions, the calculation exceeds the 32-bit integer limit and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when the plugin subsequently writes image data into the undersized buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service. 2026-09-05 CVE-2026-78465 openEuler-24.03-LTS-SP3 High 7.0 AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H gimp security update 2026-09-05 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3610 A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a denial of service due to stack exhaustion and a limited information disclosure of stack memory contents into an intermediate file. 2026-09-05 CVE-2026-78475 openEuler-24.03-LTS-SP3 Medium 6.1 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H gimp security update 2026-09-05 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3610 A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation leads to improper bounds checking, causing a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service, or a limited information disclosure of heap memory contents into the produced image. 2026-09-05 CVE-2026-80101 openEuler-24.03-LTS-SP3 Medium 4.4 AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L gimp security update 2026-09-05 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3610