CVE-2022-32990: Medium severity GIMP GIMP vulnerability
An issue in gimplayerinvalidateboundary allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).
Reference:
https://gitlab.gnome.org/GNOME/gimp/-/issues/8230
Other sources
An issue in gimplayerinvalidateboundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gimpto a version that resolves this vulnerability.Fixed in 2.10.32-1 - Upgrade
Upgrade
redhat/gimpto a version that resolves this vulnerability.Fixed in 2.10.32 - Upgrade
Upgrade
debian/gimpto a version that resolves this vulnerability.Fixed in 2.10.34-1+deb12u10Fixed in 3.0.4-3+deb13u10Fixed in 3.0.4-3+deb13u11Fixed in 3.2.6-1Fixed in 3.2.8-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-32990.
What is the severity of CVE-2022-32990?
The severity of CVE-2022-32990 is medium with a severity value of 5.5.
What software is affected by CVE-2022-32990?
GNOME GIMP 2.10.30 is affected by CVE-2022-32990.
How can an attacker exploit CVE-2022-32990?
An attacker can exploit CVE-2022-32990 by triggering an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).
Is there a fix available for CVE-2022-32990?
You can refer to the GitLab issue for updates and possible fixes for CVE-2022-32990: https://gitlab.gnome.org/GNOME/gimp/-/issues/8230