The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791479721 advisory.

  - GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22093.
    (CVE-2023-44441)

  - GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file. The specific flaw exists within the parsing of PSD files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-     CAN-22094. (CVE-2023-44442)

  - GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation     of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can     leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22096.
    (CVE-2023-44443)

  - GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote     attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to     exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The     specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one     error when calculating a location to write within a heap-based buffer. An attacker can leverage this     vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097. (CVE-2023-44444)

  - A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files     that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors,     potentially leading to crashes and causing a heap buffer overflow. (CVE-2025-48797)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791479721)

high Nessus Plugin ID 365095

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Oct 22, 2026, 10:08 AM CVSSv2 score source (changed from "CVE-2026-97185" to "CVE-2023-44444") CVSSv3 score source (set to "CVE-2026-97185") Plugin Feed: 202610221008
Version 1.2 Oct 22, 2026, 12:02 AM CVE (set "CVE" coverage to "CVE-2023-44441,CVE-2023-44442,CVE-2023-44443,CVE-2023-44444,CVE-2025-48797,CVE-2025-48798,CVE-2026-90947,CVE-2026-90948,CVE-2026-92248,CVE-2026-97185") Plugin metadata Plugin Feed: 202610220002
Version 1.1 Oct 13, 2026, 2:52 AM New Plugin Feed: 202610130252