Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-40918

Опубликовано: 15 апр. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.

РелизСтатусПримечание
devel

not-affected

3.2.2-1
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-apps/resolute

not-affected

3.2.2-1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

needs-triage

Показывать по

EPSS

Процентиль: 10%
0.00196
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
4 месяца назад

A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.

CVSS3: 5.5
nvd
4 месяца назад

A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.

CVSS3: 5.5
debian
4 месяца назад

A flaw was found in GIMP. Processing a specially crafted PVR image fil ...

CVSS3: 5.5
github
4 месяца назад

A flaw was found in GIMP. Processing a specially crafted PVR image file with large dimensions can lead to a denial of service (DoS). This occurs due to a stack-based buffer overflow and an out-of-bounds read in the PVR image loader, causing the application to crash. Systems that process untrusted PVR image files are affected.

CVSS3: 5.5
fstec
4 месяца назад

Уязвимость библиотеки для обработки изображений Gimp, связанная с некорректными вычислениями размера выделяемого буфера, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 10%
0.00196
Низкий

5.5 Medium

CVSS3