Yüksek CVSS 7.1 PoC var
CVE-2026-4887: Gimp: güvenlik açığı
Açıklama (NVD)
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible application crash, resulting in a Denial of Service (DoS).
Özet bilgiler
- Ürün
- Gimp Gimp
- CVSS v3.1
- 7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - EPSS
- %0,65 (yüzdelik 51)
- CWE
- CWE-193
- Yama
- Geçici çözüm
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gimp-gimp | — | — | 3.2.0 |
| gimp-gimp | 3.2.0 | 3.2.0 | — |
| gimp-gimp | 3.2.0 | 3.2.0 | — |
| gimp-gimp | 3.2.0 | 3.2.0 | — |