CVE-2006-3404: Gimp

Medium severity, CVSS 5.1. EPSS: 4.6% chance of exploitation in the next 30 days.

Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property.

Affected products

• Gimp Gimp: before 2.2.12 (fixed in 2.2.12)

Published 2006-07-06. Last modified 2026-06-16.