GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29289.

fedora FEDORA-2026-03ea7c5707: gegl04-0.4.70-5.fc45

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03ea7c5707 advisory.

    This update fixes an overflow in parsing RGBE/HDR image files.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106774 advisory.

    GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

    The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper     validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-     CAN-29289.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106778 advisory.

    GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

    The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper     validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-     CAN-29289.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1775:03 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-79b351972c advisory.

    This update fixes an overflow in parsing RGBE/HDR image files.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:62170 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-624200 advisory.

    [0.4.4-7.1]
    - Fix CVE-2026-18300

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-621700 advisory.

    [0.4.62-1.2]
    - Fix CVE-2026-18300: bounds check in rgbe_read_scanlines

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1747:02 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-624250 advisory.

    [0.2.0-40.1]
    - Fix local code execution vulnerability in rgbe_read_scanlines()       (CVE-2026-18300)       Resolves: RHEL-246592

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21731-1 advisory.

    Changes in gegl:

    - CVE-2026-18300: libs/rgbe: fix >200kb report from ZDI (bsc#1276229)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62425 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62420 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1746:02 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:62425 advisory.

    GEGL (Generic Graphics Library) is a graph-based image processing framework.

    Security Fix(es):

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62420 advisory.

    GEGL (Generic Graphics Library) is a graph-based image processing framework.

    Security Fix(es):

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:62420 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:62425 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62170 advisory.

    GEGL (Generic Graphics Library) is a graph-based image processing framework.

    Security Fix(es):

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62170 advisory.

    * gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29289.
    (CVE-2026-18300)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
344875	Fedora 45 : gegl04 (2026-03ea7c5707)	Nessus	Fedora Local Security Checks	Local	high
344454	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gegl (UTSA-2026-106774)	Nessus	Unity Linux Local Security Checks	Local	high
344442	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gegl04 (UTSA-2026-106778)	Nessus	Unity Linux Local Security Checks	Local	high
343482	MiracleLinux 9 : gegl04-0.4.62-1.el9_8.2 (AXSA:2026-1775:03)	Nessus	Miracle Linux Local Security Checks	Local	high
343414	Fedora 44 : gegl04 (2026-79b351972c)	Nessus	Fedora Local Security Checks	Local	high
342837	AlmaLinux 9 : gegl04 (ALSA-2026:62170)	Nessus	Alma Linux Local Security Checks	Local	high
342779	Oracle Linux 8 : ELSA-2026-62420-0: / gegl04 (ELSA-2026-624200)	Nessus	Oracle Linux Local Security Checks	Local	high
342706	Oracle Linux 9 : ELSA-2026-62170-0: / gegl04 (ELSA-2026-621700)	Nessus	Oracle Linux Local Security Checks	Local	high
342678	MiracleLinux 8 : gegl04-0.4.4-7.el8_10.1 (AXSA:2026-1747:02)	Nessus	Miracle Linux Local Security Checks	Local	high
342672	Oracle Linux 8 : ELSA-2026-62425-0: / gegl (ELSA-2026-624250)	Nessus	Oracle Linux Local Security Checks	Local	high
342642	openSUSE 16: gegl / gegl-0_4 / gegl-0_4-lang / gegl-devel / libgegl-0_4-0 / etc (openSUSE-SU-2026:21731-1)	Nessus	SuSE Local Security Checks	Local	high
342638	RockyLinux 8 : gegl (RLSA-2026:62425)	Nessus	Rocky Linux Local Security Checks	Local	high
342603	RockyLinux 8 : gegl04 (RLSA-2026:62420)	Nessus	Rocky Linux Local Security Checks	Local	high
342594	MiracleLinux 8 : gegl-0.2.0-40.el8_10.1 (AXSA:2026-1746:02)	Nessus	Miracle Linux Local Security Checks	Local	high
342510	RHEL 8 : gegl (RHSA-2026:62425)	Nessus	Red Hat Local Security Checks	Local	high
342431	RHEL 8 : gegl04 (RHSA-2026:62420)	Nessus	Red Hat Local Security Checks	Local	high
342430	AlmaLinux 8 : gegl04 (ALSA-2026:62420)	Nessus	Alma Linux Local Security Checks	Local	high
342395	AlmaLinux 8 : gegl (ALSA-2026:62425)	Nessus	Alma Linux Local Security Checks	Local	high
342285	RHEL 9 : gegl04 (RHSA-2026:62170)	Nessus	Red Hat Local Security Checks	Local	high
342278	RockyLinux 9 : gegl04 (RLSA-2026:62170)	Nessus	Rocky Linux Local Security Checks	Local	high
338715	Linux Distros Unpatched Vulnerability : CVE-2026-18300	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-18300

high

Tenable Plugins

Coming Soon

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high