CVE-2012-2763: Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and e...

Security readout for executives and security teams

CVE-2012-2763 is an old GIMP vulnerability where the Script-Fu server could mishandle an overly long string and overflow memory. The reported impact is arbitrary code execution by a remote attacker, but only where vulnerable GIMP versions expose that server interface. Exposure is most likely on legacy desktops or servers running GIMP 2.6.x with the Script-Fu server enabled or reachable. Current environments are less likely affected unless they retain old packages, custom builds, or unsupported images. Prioritize remediation where old GIMP installations are reachable over a network or present on high-value workstations. This is legacy software risk, but the reported impact is code execution, so exposed instances should not be deferred. Mitigation focus: Upgrade GIMP using vendor-supported packages or distro advisories.; Remove or isolate GIMP 2.6.x installations from managed environments.; Disable or block Script-Fu server exposure if it is not required..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.