CVE-2018-12713 - CVE House
Back to Database
Status published Critical CVE-2018-12713

GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames,...

Vulnerability Description

GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was intended to be private.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-12713

Credits & Attribution

No credits recorded in the NVD database.

References

More from gimp

View All →
CVE-2022-32990
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers...
Medium 5.5
CVE-2022-30067
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through...
Medium 5.5
CVE-2017-17789
In GIMP 2.8.22, there is a heap-based buffer overflow in...
High 7.8
CVE-2017-17788
In GIMP 2.8.22, there is a stack-based buffer over-read in...
Medium 5.5
CVE-2017-17787
In GIMP 2.8.22, there is a heap-based buffer over-read in...
High 7.8

Affected Vendor

Affected Software

gimp
Vulnerable Versions:
0

Timeline

Official Publish: June 24th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.