Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged
Permalink CVE-2026-58381
6.1 MEDIUM
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): Low (L)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): Low (L)
  • Modified Availability (MA): High (H)
created 1 month, 3 weeks ago Activity log
  • Created suggestion
Gimp: gimp: double-free in read_layer_block()

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.

Affected products

gimp
gimp:2.8/gimp

Matching in nixpkgs

pkgs.gimp

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimp2

GNU Image Manipulation Program

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gimp3

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.zigimports

Automatically remove unused imports and globals from Zig files

  • nixos-unstable -
    • nixos-unstable-small 0.1.0
  • nixos-26.05 -
    • nixos-26.05-small 0.1.0

pkgs.gimpPlugins.gimp

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimpPlugins.gmic

GIMP plugin for the G'MIC image processing framework

  • nixos-unstable -
    • nixos-unstable-small 3.5.0
  • nixos-26.05 -
    • nixos-26.05-small 3.5.0

pkgs.gimp-with-plugins

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimp2Plugins.bimp

Batch Image Manipulation Plugin for GIMP

  • nixos-unstable -
    • nixos-unstable-small 2.6
  • nixos-26.05 -
    • nixos-26.05-small 2.6

pkgs.gimp2Plugins.gmic

GIMP plugin for the G'MIC image processing framework

  • nixos-unstable -
    • nixos-unstable-small 3.5.0
  • nixos-26.05 -
    • nixos-26.05-small 3.5.0

pkgs.gimp2Plugins.fourier

GIMP plug-in to do the fourier transform

  • nixos-unstable -
    • nixos-unstable-small 0.4.3
  • nixos-26.05 -
    • nixos-26.05-small 0.4.3