Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
GIMP could let attackers run code via crafted DDS files
published 5 days ago
Summary
GIMP can be tricked by a specially crafted DDS image file to execute malicious code on the computer. This could let an attacker take control of the system without the user’s knowledge. Install the latest GIMP update, or avoid opening DDS files from sources you don’t trust.
What to do
- Update cleanstart gimp to version 2.10.36-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | gimp |
< 2.10.36-r0 Fix: upgrade to 2.10.36-r0
|
Original advisory text
GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Security vulnerability affects the gimp package. GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-HD72386 · OSV
Track software like this
Free during beta