CVE-2012-3403: Gimp

Medium severity, CVSS 6.8. EPSS: 5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the KiSS CEL file format plug-in in GIMP 2.8.x and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted KiSS palette file, which triggers an "invalid free."

Affected products

• Gimp Gimp: up to and including 2.8.0

Published 2012-08-25. Last modified 2026-06-16.