[UPDATE] [hoch] GIMP Plugins: Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.
CSIRTS triage
- What
- Multiple vulnerabilities in GIMP can be exploited to carry out a Denial of Service attack, execute arbitrary code, or disclose confidential information.
- Who is affected
- Local attackers can exploit these vulnerabilities in GIMP.
- Urgency
- Remediation is urgent due to the high severity and potential for exploitation.
- Action
- Update to the latest version of GIMP to mitigate these vulnerabilities.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch GIMP
Get an email when a new GIMP advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2539
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-667570.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-667580.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-667590.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-66757 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66758 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-66759 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownDSA-6470-1 gimp - security updatedebian
- highCVE-2026-66759: A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICN…nvd
- highCVE-2026-66758: A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugi…nvd
- mediumCVE-2026-66757: A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, …nvd
Recent advisories for GIMP Plugins
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-82343: A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image…nvd · 2026-08-28
- mediumCVE-2026-82330: A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image…nvd · 2026-08-28
- mediumCVE-2026-82328: A flaw was found in the file-ico plugin in GIMP. When processing a specially crafted ICO image…nvd · 2026-08-28
- mediumCVE-2026-82324: A flaw was found in the file-iff (IFF/ILBM) plugin in GIMP. When processing a specially crafte…nvd · 2026-08-28
- mediumCVE-2026-79902: A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted …nvd · 2026-08-26
- mediumCVE-2026-80101: A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image…nvd · 2026-08-25
More from CERT-Bund (BSI) Security Advisories
- high[UPDATE] [hoch] Fortinet FortiOS: Schwachstelle ermöglicht Codeausführung2026-09-10
- high[UPDATE] [hoch] ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung2026-09-10
- high[UPDATE] [hoch] Dell Secure Connect Gateway: Mehrere Schwachstellen2026-09-09
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service2026-09-09
- medium[UPDATE] [mittel] Red Hat Enterprise Linux (dracut): Schwachstelle ermöglicht Ausführen von beliebigem Program…2026-09-09