Gegl is a graphics-processing library that serves as a foundational component for image-manipulation and rendering pipelines, with a narrow product scope but significant reach in applications that depend on its image-processing capabilities. The disclosed vulnerabilities center on memory-safety issues including buffer-boundary violations and related low-level memory-handling concerns, which are typical of image codec and filter implementations that parse and transform binary data. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Gegl over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-4433HIGH Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or pos | Nov 18, 2012 | 7.5 | 31 | NO | NO |
CVE-2018-10114HIGH An issue was discovered in GEGL through 0.3.32. The gegl_buffer_iterate_read_simple function in buffer/gegl-buffer-access.c allows remote attackers to cause a denial of service (wr | Apr 16, 2018 | 8.8 | 27 | NO | NO |
CVE-2021-45463HIGH load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library functi | Dec 23, 2021 | 7.8 | 26 | NO | NO |
CVE-2018-10112HIGH An issue was discovered in GEGL through 0.3.32. The gegl_tile_backend_swap_constructed function in buffer/gegl-tile-backend-swap.c allows remote attackers to cause a denial of serv | Apr 16, 2018 | 8.8 | 26 | NO | NO |
CVE-2018-10113HIGH An issue was discovered in GEGL through 0.3.32. The process function in operations/external/ppm-load.c has unbounded memory allocation, leading to a denial of service (application | Apr 16, 2018 | 7.5 | 24 | NO | NO |
CVE-2018-10111HIGH An issue was discovered in GEGL through 0.3.32. The render_rectangle function in process/gegl-processor.c has unbounded memory allocation, leading to a denial of service (applicati | Apr 16, 2018 | 7.5 | 19 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Gegl.
Media articles that mention a CVE ID that affects a product developed by Gegl — matched by CVE ID, not by vendor name.