| Package | Affected versions | Patched versions |
|---|---|---|
| gimp | = 2.8.22 |
In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free