Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged
Permalink CVE-2026-58379
7.3 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): Required (R)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): Required (R)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 1 month, 3 weeks ago Activity log
  • Created suggestion 1 month, 3 weeks ago
Gimp: gimp: heap buffer overflow in read_channel_data()

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.

Affected products

gimp
gimp:2.8/gimp

Matching in nixpkgs

pkgs.gimp

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimp2

GNU Image Manipulation Program

  • nixos-unstable -
  • nixos-26.05 -

pkgs.gimp3

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.zigimports

Automatically remove unused imports and globals from Zig files

  • nixos-unstable -
    • nixos-unstable-small 0.1.0
  • nixos-26.05 -
    • nixos-26.05-small 0.1.0

pkgs.gimpPlugins.gimp

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimpPlugins.gmic

GIMP plugin for the G'MIC image processing framework

  • nixos-unstable -
    • nixos-unstable-small 3.5.0
  • nixos-26.05 -
    • nixos-26.05-small 3.5.0

pkgs.gimp-with-plugins

GNU Image Manipulation Program

  • nixos-unstable -
    • nixos-unstable-small 3.2.4
  • nixos-26.05 -
    • nixos-26.05-small 3.0.8

pkgs.gimp2Plugins.bimp

Batch Image Manipulation Plugin for GIMP

  • nixos-unstable -
    • nixos-unstable-small 2.6
  • nixos-26.05 -
    • nixos-26.05-small 2.6

pkgs.gimp2Plugins.gmic

GIMP plugin for the G'MIC image processing framework

  • nixos-unstable -
    • nixos-unstable-small 3.5.0
  • nixos-26.05 -
    • nixos-26.05-small 3.5.0

pkgs.gimp2Plugins.fourier

GIMP plug-in to do the fourier transform

  • nixos-unstable -
    • nixos-unstable-small 0.4.3
  • nixos-26.05 -
    • nixos-26.05-small 0.4.3