A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778861508 advisory.

  - A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS     image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory     allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful     exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.
    (CVE-2026-40915)

  - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.
    (CVE-2026-4150)

  - GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28863.
    (CVE-2026-4152)

  - GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.
    (CVE-2026-4153)

  - GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.
    (CVE-2026-4154)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778860714 advisory.

  - A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS     image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory     allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful     exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.
    (CVE-2026-40915)

  - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.
    (CVE-2026-4150)

  - GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28863.
    (CVE-2026-4152)

  - GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.
    (CVE-2026-4153)

  - GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.
    (CVE-2026-4154)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778861508 advisory.

  - A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS     image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory     allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful     exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.
    (CVE-2026-40915)

  - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.
    (CVE-2026-4150)

  - GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28863.
    (CVE-2026-4152)

  - GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.
    (CVE-2026-4153)

  - GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.
    (CVE-2026-4154)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-017 advisory.

    A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS     image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory     allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful     exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.
    (CVE-2026-40915)

    A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates     memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both     values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based     buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio     subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to     arbitrary code execution or a denial of service. (CVE-2026-66758)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2GIMP-2026-015 advisory.

    A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS     image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory     allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful     exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.
    (CVE-2026-40915)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS     image loader by providing a specially crafted FITS file. This integer overflow leads to a zero-byte memory     allocation, which is then subjected to a heap buffer overflow when processing pixel data. Successful     exploitation could result in a denial of service (DoS) or potentially arbitrary code execution.
    (CVE-2026-40915)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
360586	Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778861508)	Nessus	Rocky Linux Local Security Checks	Local	high
360229	AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778860714)	Nessus	Alma Linux Local Security Checks	Local	high
360033	AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778861508)	Nessus	Alma Linux Local Security Checks	Local	high
337238	Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-017 (ALASGIMP-2026-017)	Nessus	Amazon Linux Local Security Checks	Local	high
314578	Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-015 (ALASGIMP-2026-015)	Nessus	Amazon Linux Local Security Checks	Local	high
306587	Linux Distros Unpatched Vulnerability : CVE-2026-40915	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-40915

high

Tenable Plugins

high

high

high

high

high

high