CVE-2007-3741: GNU Gimp

Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days.

The (1) psp (aka .tub), (2) bmp, (3) pcx, and (4) psd plugins in gimp allow user-assisted remote attackers to cause a denial of service (crash or memory consumption) via crafted image files, as discovered using the fusil fuzzing tool.

Affected products

• GNU Gimp: any version

Published 2007-08-27. Last modified 2026-06-16.