high 7.8

CVE-2023-44444 in the critical feed json

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

published 2024-05-03 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-48784

cvss: 7.8; version 3.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 56.1%; EPSS 56.1% chance of exploitation in 30 days, percentile 99%
public exploits: 0; none known

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.

Patch / fix

fixed in 1 distros 7

GIMP GIMP 2.10.36

debian ubuntu red hat suse almalinux rocky linux alpine

gimp Debian 12 2.10.34-1+deb12u1
gimp Debian 14, Debian 13 2.10.36-1

debian advisories DEBIAN-CVE-2023-44444

gimp Ubuntu 20.04 LTS 2.10.18-1ubuntu0.1
gimp Ubuntu 22.04 LTS 2.10.30-1ubuntu0.1

ubuntu advisories UBUNTU-CVE-2023-44444

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

gimp RHEL 9 2:2.99.8-4.el9_6
gimp-libs RHEL 9 2:2.99.8-4.el9_6
gimp RHEL 9 2:2.99.8-4.el9_5
gimp-libs RHEL 9 2:2.99.8-4.el9_5
gimp RHEL 8 2:2.8.22-26.module+el8.10.0+22678+3f0023d6
pygtk2 RHEL 8 2.24.0-25.module+el8.9.0+21228+8e80d31d
gimp-libs RHEL 8 2:2.8.22-26.module+el8.10.0+22678+3f0023d6
pygobject2 RHEL 8 2.28.7-5.module+el8.10.0+22676+becd68d6

red hat advisories RHSA-2025:7417 RHSA-2025:3629 RHSA-2025:3617 RHSA-2025:0746 RHSA-2024:10666 RHSA-2024:1327

gimp SLE Workstation Extension 12 SP5, SLE Software Development Kit 12 SP5 2.8.18-9.27.1
gimp SLE Workstation Extension 15 SP5, SLE Workstation Extension 15 SP4, SLE Module for Package Hub 15 SP5 +3 more 2.10.30-150400.3.11.1

suse advisories SUSE-SU-2023:4697-1 SUSE-SU-2023:4692-1

gimp AlmaLinux 9 2:2.99.8-4.el9_6
gimp-libs AlmaLinux 9 2:2.99.8-4.el9_6
gimp AlmaLinux 9 2:2.99.8-4.el9_5
gimp-libs AlmaLinux 9 2:2.99.8-4.el9_5
gimp AlmaLinux 8 2:2.8.22-26.module_el8.10.0+3952+571e801c
pygtk2 AlmaLinux 8 2.24.0-25.module_el8.9.0+3725+d1441900
gimp-libs AlmaLinux 8 2:2.8.22-26.module_el8.10.0+3952+571e801c
pygobject2 AlmaLinux 8 2.28.7-5.module_el8.10.0+3952+571e801c

almalinux advisories ALSA-2025:7417 ALSA-2025:3617 ALSA-2025:0746 ALSA-2024:0861 ALSA-2024:0675

gimp Rocky Linux 9 2:2.99.8-4.el9_6
gimp Rocky Linux 9 2:2.99.8-4.el9_3
gimp Rocky Linux 8 2:2.8.22-26.module+el8.10.0+1927+52edb5a0
pygtk2 Rocky Linux 8 2.24.0-25.module+el8.9.0+1723+9bc93544
pygobject2 Rocky Linux 8 2.28.7-5.module+el8.10.0+1927+52edb5a0
python2-pycairo Rocky Linux 8 1.16.3-7.module+el8.10.0+1927+52edb5a0
gimp Rocky Linux 8 2:2.8.22-25.module+el8.9.0+1723+9bc93544
pygobject2 Rocky Linux 8 2.28.7-4.module+el8.9.0+1724+6863d082

rocky linux advisories RLSA-2025:3617 RLSA-2025:7417 RLSA-2025:0746 RLSA-2024:0675 RLSA-2024:0861

gimp Alpine 3.24, Alpine 3.23, Alpine 3.22 +3 more 2.10.36-r0

alpine advisories ALPINE-CVE-2023-44444

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-44444 updated 2026-11-07 cvss 7.8

gimp: psp off-by-one RCE

Red Hat Enterprise Linux 6 gimp, gimp-libs, gimp-devel-tools, gimp-help-browser
affected: workaround, no fix planned “Out of support scope”
Red Hat Enterprise Linux AppStream (v. 8) gimp 2.8.22-25.module+el8.9.0+21239+e25d5ab1, gimp 2.8.22-26.module+el8.10.0+22678+3f0023d6, pygtk2 2.24.0-25.module+el8.9.0+21228+8e80d31d, gimp-libs 2.8.22-25.module+el8.9.0+21239+e25d5ab1, pygobject2 2.28.7-4.module+el8.9.0+21228+8e80d31d, gimp-libs 2.8.22-26.module+el8.10.0+22678+3f0023d6, +10 more
fixed: vendor fix RHSA-2025:0746
Red Hat Enterprise Linux AppStream (v. 9) gimp 2.99.8-4.el9_3, gimp 2.99.8-4.el9_5, gimp 2.99.8-4.el9_6, gimp-libs 2.99.8-4.el9_3, gimp-libs 2.99.8-4.el9_5, gimp-libs 2.99.8-4.el9_6
fixed: vendor fix RHSA-2024:0675
Red Hat Enterprise Linux AppStream AUS (v. 8.2) pygtk2 2.24.0-24.module+el8+2760+3d7d61b2, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, gimp 2.8.22-16.module+el8.2.0+21331+ebcfa2f2.1, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, pygtk2-codegen 2.24.0-24.module+el8+2760+3d7d61b2, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:1327
Red Hat Enterprise Linux AppStream AUS (v.8.4) gimp 2.8.22-16.module+el8.4.0+21284+53f03f2b, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, pygtk2 2.24.0-25.module+el8.4.0+9382+ff08b506, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, gimp-libs 2.8.22-16.module+el8.4.0+21284+53f03f2b, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:1007
Red Hat Enterprise Linux AppStream E4S (v. 8.2) pygtk2 2.24.0-24.module+el8+2760+3d7d61b2, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, gimp 2.8.22-16.module+el8.2.0+21331+ebcfa2f2.1, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, pygtk2-codegen 2.24.0-24.module+el8+2760+3d7d61b2, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:1327
Red Hat Enterprise Linux AppStream E4S (v.8.4) gimp 2.8.22-16.module+el8.4.0+21284+53f03f2b, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, pygtk2 2.24.0-25.module+el8.4.0+9382+ff08b506, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, gimp-libs 2.8.22-16.module+el8.4.0+21284+53f03f2b, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:1007
Red Hat Enterprise Linux AppStream EUS (v.8.6) gimp 2.8.22-18.module+el8.6.0+21241+b15d72f3, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, pygtk2 2.24.0-25.module+el8.4.0+9382+ff08b506, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, gimp-libs 2.8.22-18.module+el8.6.0+21241+b15d72f3, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:0863

show 7 more

Red Hat Enterprise Linux AppStream EUS (v.8.8) gimp 2.8.22-25.module+el8.8.0+21240+7db4aa5a, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, pygtk2 2.24.0-25.module+el8.4.0+9382+ff08b506, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, gimp-libs 2.8.22-25.module+el8.8.0+21240+7db4aa5a, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:0862
Red Hat Enterprise Linux AppStream EUS (v.9.0) gimp 2.99.8-3.el9_0, gimp-libs 2.99.8-3.el9_0
fixed: vendor fix RHSA-2024:0716
Red Hat Enterprise Linux AppStream EUS (v.9.2) gimp 2.99.8-4.el9_2, gimp-libs 2.99.8-4.el9_2
fixed: vendor fix RHSA-2024:0702
Red Hat Enterprise Linux AppStream EUS (v.9.4) gimp 2.99.8-4.el9_4, gimp-libs 2.99.8-4.el9_4
fixed: vendor fix RHSA-2025:3629
Red Hat Enterprise Linux AppStream TUS (v. 8.2) pygtk2 2.24.0-24.module+el8+2760+3d7d61b2, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, gimp 2.8.22-16.module+el8.2.0+21331+ebcfa2f2.1, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, pygtk2-codegen 2.24.0-24.module+el8+2760+3d7d61b2, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:1327
Red Hat Enterprise Linux AppStream TUS (v.8.4) gimp 2.8.22-16.module+el8.4.0+21284+53f03f2b, pygobject2 2.28.7-4.module+el8+2760+3d7d61b2, pygtk2 2.24.0-25.module+el8.4.0+9382+ff08b506, python2-cairo 1.16.3-6.module+el8+2760+3d7d61b2, gimp-libs 2.8.22-16.module+el8.4.0+21284+53f03f2b, python2-pycairo 1.16.3-6.module+el8+2760+3d7d61b2, +3 more
fixed: vendor fix RHSA-2024:1007
Red Hat Enterprise Linux Server (v. 7 ELS) gimp 2.8.22-1.el7_9.1, gimp-libs 2.8.22-1.el7_9.1 Red Hat Enterprise Linux Server Optional (v. 7 ELS) gimp 2.8.22-1.el7_9.1, gimp-libs 2.8.22-1.el7_9.1, gimp-devel-tools 2.8.22-1.el7_9.1
fixed: vendor fix RHSA-2024:10666

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago (2024-07-05)

Exploit prediction

56.13% chance of exploitation in the next 30 days, higher than 99% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.0	7.8	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

GIMP GIMP

Classification

Weakness

CWE-193 Off-by-one Error

References

gimp.org /news/2023/11/07/gimp-2-10-36-released/
vendor-advisory, release-notes
zerodayinitiative.com /advisories/ZDI-23-1591/
third-party-advisory
lists.debian.org /debian-lts-announce/2023/11/msg00015.html

Sources

CVE List CVE-2023-44444
NVD CVE-2023-44444

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary