Summary
Michael Randrianantenaina discovered that GIMP incorrectly handled certain
malformed ICO files. An attacker could possibly use this to cause a denial
of service or execute arbitrary code. (CVE-2025-5473)
Seungho Kim discovered that GIMP incorrectly handled certain memory
operations when running the despeckle plugin. An attacker could possibly
use this to cause a denial of service or execute arbitrary code.
(CVE-2025-6035)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gimp | 2.8.16-1ubuntu1.1+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gimp | 2.8.22-1ubuntu0.1~esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gimp | 2.10.18-1ubuntu0.1+esm3 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | gimp | 2.10.30-1ubuntu0.1+esm3 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | gimp | 2.10.36-3ubuntu0.24.04.1+esm3 |