CVE-2012-5576: Gimp

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large (1) red, (2) green, or (3) blue color mask in an XWD file.

Affected products

• Gimp Gimp: before 2.8.4 (fixed in 2.8.4)

Published 2012-12-18. Last modified 2026-06-16.