CVE-2026-2046
published 2026CVE-2026-2046: bookworm: open bullseye: open forky: resolved (fixed in 3.2.0-1) sid: resolved (fixed in 3.2.0-1) trixie: open
low7.6
bookworm: open
bullseye: open
forky: resolved (fixed in 3.2.0-1)
sid: resolved (fixed in 3.2.0-1)
trixie: open
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gimp | < gimp 3.2.0-1 (forky) | gimp 3.2.0-1 (forky) |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2026-2046: gimp
vendor_debian·2026
CVE-2026-2046 [LOW] CVE-2026-2046: gimp
bookworm: open
bullseye: open
forky: resolved (fixed in 3.2.0-1)
sid: resolved (fixed in 3.2.0-1)
trixie: open
VulDB
GIMP LBM File Parser heap-based overflow (WID-SEC-2026-0750)
vuldb·2026-04-21
CVE-2026-2046 [CRITICAL] GIMP LBM File Parser heap-based overflow (WID-SEC-2026-0750)
A vulnerability described as critical has been identified in GIMP. This affects an unknown part of the component LBM File Parser. The manipulation results in heap-based buffer overflow.
This vulnerability is reported as CVE-2026-2046. The attack can be launched remotely. No exploit exists.
It is best practice to apply a patch to resolve this issue.
No detection rules found.
Bugzilla
CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export [fedora-all]
bugzilla·2026-07-28·CVSS 7.6
CVE-2026-16313 [HIGH] CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export [fedora-all]
CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
sg3_utils v1.34 through v1.48 contains a command injection flaw in export_dev_ids() in src/sg_inq.c. The sg_inq --export command outputs SCSI device identification data from VPD page 0x83 in KEY=VALUE format for udev import. The SCSI name string field (designator type 8, line 2046) and the ATA subfield (line 1922) are printed with printf("%.*s") without sanitizing control characters. A newline embedded in a device-controlled name string splits a
Bugzilla
CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
bugzilla·2026-07-20·CVSS 7.6
CVE-2026-16313 [HIGH] CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
CVE-2026-16313 sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
sg3_utils v1.34 through v1.48 contains a command injection flaw in export_dev_ids() in src/sg_inq.c. The sg_inq --export command outputs SCSI device identification data from VPD page 0x83 in KEY=VALUE format for udev import. The SCSI name string field (designator type 8, line 2046) and the ATA subfield (line 1922) are printed with printf("%.*s") without sanitizing control characters. A newline embedded in a device-controlled name string splits a single property into two lines, allowing injection of arbitrary udev properties including REMOVE_CMD. Combined with the default udev rule in 50-udev-default.rules that executes REMOVE_CMD on device removal, this enables arbitrary root co
2026
Published