Skip to content
OpenAdvisories
High DSA-6043-1 3 CVEs

gimp - security update

Published Oct 28, 2025 · Updated Oct 28, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 gimp 2.10.34-1+deb12u4

Vulnerabilities 3

  • High 7.8
    CVE-2025-10922

    GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that th…

    GIMP GIMP gimp gimp Debian Ubuntu
  • High 7.8
    CVE-2025-2760 EPSS 17%

    GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability

    GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target m…

    GIMP GIMP gimp gimp Debian Ubuntu
  • Medium 6.1
    CVE-2025-6035

    Gimp: gimp integer overflow

    A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can result in allocating insu…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu