How many CVEs have a located fix in debian/gimp?

14 published CVEs have a fix traced to functions in debian/gimp, touching 6 functions across 12 files.

Which function in debian/gimp has been patched by the most CVEs?

resource_find in plug-ins/file-icns/file-icns-load.c has been changed by 1 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in debian/gimp?

The median fix changes 31 lines. 43% of fixes change 20 lines or fewer, and 71% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#412 of 500 repositories

debian/gimp

Name: debian/gimp: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix March 26, 2026

14

CVE fixes located

Published CVEs

6

Functions patched

Distinct function sites

12

Files patched

Distinct source files

2025–2026

Years covered

By CVE publication date

Overview

14 published CVEs have a fix traced to functions in debian/gimp, the earliest published in 2025. Those fixes changed 6 distinct functions across 12 files, in 55 patch hunks.

Among the 500 repositories tracked here, debian/gimp ranks #412 by the number of CVEs with a located fix.

Most patched functions

Functions in debian/gimp changed by the most CVE fixes.

Most patched files

Files in debian/gimp changed by the most CVE fixes.

1plug-ins/file-icns/file-icns-load.c2 CVEs · 1 functions
2plug-ins/file-ico/ico-load.c2 CVEs · 0 functions
3app/xcf/xcf-load.c1 CVEs · 2 functions
4plug-ins/common/despeckle.c1 CVEs · 2 functions
5plug-ins/common/file-farbfeld.c1 CVEs · 1 functions
6plug-ins/common/file-pnm.c1 CVEs · 0 functions
7plug-ins/common/file-psp.c1 CVEs · 0 functions
8plug-ins/common/file-tga.c1 CVEs · 0 functions
9plug-ins/common/file-xwd.c1 CVEs · 0 functions
10plug-ins/file-dds/ddsread.c1 CVEs · 0 functions

Fix size

How much code a CVE fix in debian/gimp changes, with backports counted once.

31

Median lines changed

Added plus removed, per CVE

43%

Fixes of 20 lines or fewer

Share of CVE fixes

71%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in debian/gimp, and the functions each fix changed.

Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow
CVE-2026-2239
Medium · CVSS 6.5
EPSS 0.5%2026-03-26
Gimp: gimp: memory corruption due to integer overflow in ico file handling
CVE-2026-2272
Medium · CVSS 6.5
EPSS 0.8%2026-03-26
Gimp: gimp: denial of service via crafted psp image file
CVE-2026-2271
Medium · CVSS 5.5
EPSS 0.5%2026-03-26
GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2026-2048
High · CVSS 7.8
EPSS 0.6%2026-02-20
GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-2047resource_find
High · CVSS 7.8
EPSS 0.6%2026-02-20
GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability
CVE-2026-2044
High · CVSS 8.8
EPSS 1.0%2026-02-20
GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-0797
High · CVSS 8.8
EPSS 1.2%2026-02-20
GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability
CVE-2025-10924g_size_checked_mul
High · CVSS 7.8
EPSS 0.5%2025-10-29
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2025-10920
High · CVSS 7.8
EPSS 0.5%2025-10-29
Gimp: gimp integer overflow
CVE-2025-6035g_size_checked_mul run
High · CVSS 7.8
EPSS 0.6%2025-06-13
Gimp: multiple use after free in xcf parser
CVE-2025-48798gimp_channel_is_empty xcf_load_channel_props
High · CVSS 7.3
EPSS 0.2%2025-05-27
Gimp: multiple heap buffer overflows in tga parser
CVE-2025-48797
High · CVSS 7.3
EPSS 0.3%2025-05-27

Get an alert for each new debian/gimp CVE, with the patched functions and AI-written analysis.

Monitor gimp CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

AcademySoftwareFoundation/OpenImageIO14 CVEs ail-project/ail-framework14 CVEs android.googlesource.com/platform-external-libhevc14 CVEs apostrophecms/apostrophe14 CVEs assimp/assimp14 CVEs authzed/spicedb14 CVEs bigtreecms/BigTree-CMS14 CVEs canonical/lxd14 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in debian/gimp.

How many CVEs have a located fix in debian/gimp?: 14 published CVEs have a fix traced to functions in debian/gimp, touching 6 functions across 12 files.
Which function in debian/gimp has been patched by the most CVEs?: resource_find in plug-ins/file-icns/file-icns-load.c has been changed by 1 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in debian/gimp?: The median fix changes 31 lines. 43% of fixes change 20 lines or fewer, and 71% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track debian/gimp CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing