CVE-2022-30067

gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program

CVE-2022-30067 is fixed in 4 products on 1 platform, first by DEBIAN-CVE-2022-30067, released May 17, 2022. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.2
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0076
55th percentile

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: buffer overflow through a crafted XCF file (CVE-2022-30067) * gimp: unhandled exception via a crafted XCF file may lead to DoS (CVE-2022-32990) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
gimp · Debian 11.6 (bullseye) 2.10.22-4+deb11u5 DLA-4431-1 Jan 2, 2026
gimp · Debian 12.15 (bookworm) 2.10.32-1 DEBIAN-CVE-2022-30067 May 17, 2022
gimp · Debian 13.5 (trixie) 2.10.32-1 DEBIAN-CVE-2022-30067 May 17, 2022
gimp · Debian 14 2.10.32-1 DEBIAN-CVE-2022-30067 May 17, 2022
gimp · RHEL 9 2:2.99.8-3.el9 RHSA-2022:7978 Nov 15, 2022
gimp · Ubuntu 20.04 LTS (focal) 2.10.18-1ubuntu0.1 gimp 2.10.18-1ubuntu0.1 Nov 14, 2023
gimp · Ubuntu 22.04.1 LTS (jammy) 2.10.30-1ubuntu0.1 gimp 2.10.30-1ubuntu0.1 Nov 14, 2023
gimp · almalinux 9 2:2.99.8-3.el9 ALSA-2022:7978 Nov 15, 2022
gimp · ol 9 2:2.99.8-3.el9 ELSA-2022-7978 Nov 22, 2022
gimp · rocky 9 2:2.99.8-3.el9 RLSA-2022:7978 Nov 15, 2022
gimp-data · Ubuntu 20.04 LTS (focal) 2.10.18-1ubuntu0.1 gimp-data 2.10.18-1ubuntu0.1 Nov 14, 2023
gimp-data · Ubuntu 22.04.1 LTS (jammy) 2.10.30-1ubuntu0.1 gimp-data 2.10.30-1ubuntu0.1 Nov 14, 2023
gimp-libs · RHEL 9 2:2.99.8-3.el9 RHSA-2022:7978 Nov 15, 2022
gimp-libs · almalinux 9 2:2.99.8-3.el9 ALSA-2022:7978 Nov 15, 2022
gimp-libs · ol 9 2:2.99.8-3.el9 ELSA-2022-7978 Nov 22, 2022
libgimp2.0 · Ubuntu 20.04 LTS (focal) 2.10.18-1ubuntu0.1 libgimp2.0 2.10.18-1ubuntu0.1 Nov 14, 2023
libgimp2.0 · Ubuntu 22.04.1 LTS (jammy) 2.10.30-1ubuntu0.1 libgimp2.0 2.10.30-1ubuntu0.1 Nov 14, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.