Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2026-103641

Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gegl Redhat
Products
Gegl Enterprise Linux Rhel Els
CVE-2020-37239

libbabl 0.1.62 Broken Double Free Detection Memory Safety

libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_free() twice on the same pointer without triggering detection, as libc's malloc metadata overwrites babl's signature field upon freeing, enabling potential memory corruption and code execution.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Gegl
Products
Gegl Libbabl
CVE-2021-45463

gegl: shell expansion via a crafted pathname

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

CVSS 3.1 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Fedoraproject Gegl Gimp and 1 more
Products
Fedora Gegl Gimp and 2 more
CVE-2012-4433

gegl: Integer overflow, leading to heap-based buffer overflow by parsing PPM image headers

Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 13.3% KEV · Not listed
Vendors
Gegl Redhat
Products
Gegl Enterprise Linux
CVE-2018-10114

gegl: write access violation gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c

An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PPM file, related to improper restrictions on memory allocation in the ppm_load_read_header function in operations/external/ppm-load.c.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Gegl
Products
Gegl
CVE-2018-10113

gegl: unbounded memory allocation in process function in operations/external/ppm-load.c

An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Gegl
Products
Generic Graphics Library
CVE-2018-10112

gegl: write access violation in gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c

An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of service (write access violation) or possibly have unspecified other impact via a malformed PNG file that is mishandled during a call to the babl_format_get_bytes_per_pixel function in babl-format.c in babl 0.1.46.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Gegl
Products
Gegl
CVE-2018-10111

gegl: unbounded memory allocation in render_rectangle function in process/gegl-processor.c

An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (application crash) upon allocation failure.

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Gegl
Products
Gegl