Skip to content
OpenAdvisories
High · 7.8 CVE-2023-44441 EUVD-2023-48781GHSA-mh5h-w46h-67mh

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Published May 3, 2024 · Updated Nov 4, 2025 · Assigned by zdi

Vendor: GIMP Product: GIMP Package: gimp Package: gimp Package: gimp Package: gimp-dds Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of DDS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
. Was ZDI-CAN-22093.

Affected products

VendorProductAffectedFixed
GIMP GIMP GIMP 2.10.34 (revision 2) —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 gimp 2.10.36-1 —
Debian 13 gimp 2.10.36-1 —
Debian 12 gimp 2.10.34-1+deb12u1 DSA-5564-1
Debian 11 gimp 2.10.22-4+deb11u1 DSA-5564-1
Debian 10 gimp-dds 3.0.1-1+deb10u1 DLA-3677-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS gimp 2.10.30-1ubuntu0.1 USN-6521-1
Ubuntu 22.04 LTS gimp-dds 3.0.1-1+deb10u1build0.22.04.1 USN-7209-1
Ubuntu 20.04 LTS gimp 2.10.18-1ubuntu0.1 USN-6521-1
Ubuntu 20.04 LTS gimp-dds 3.0.1-1+deb10u1build0.20.04.1 USN-7209-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS gimp-dds 3.0.1-1+deb10u1build0.18.04.1~esm1 USN-7209-1
Ubuntu Pro 16.04 LTS gimp-dds 3.0.1-1+deb10u1build0.16.04.1~esm1 USN-7209-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 gimp +1 2:2.99.8-4.el9_3 RHSA-2025:7417, RHSA-2025:3617, RHSA-2024:0675
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.4 EUS gimp +1 2:2.99.8-4.el9_4 RHSA-2025:3629
RHEL 9.2 EUS gimp +1 2:2.99.8-4.el9_2 RHSA-2024:0702
RHEL 9.0 EUS gimp +1 2:2.99.8-3.el9_0 RHSA-2024:0716

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 gimp +1 2:2.99.8-4.el9_3 ALSA-2025:7417, ALSA-2025:3617, ALSA-2024:0675

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 gimp 2:2.99.8-4.el9_3 RLSA-2025:7417, RLSA-2025:3617, RLSA-2024:0675

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 gimp 2.10.30-150400.3.11.1 SUSE-SU-2023:4692-1
SLES 15 SP4 gimp 2.10.30-150400.3.11.1 SUSE-SU-2023:4692-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 15.5 gimp 2.10.30-150400.3.11.1 SUSE-SU-2023:4692-1
openSUSE Leap 15.4 gimp 2.10.30-150400.3.11.1 SUSE-SU-2023:4692-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 gimp 2.10.36-r0 —
Alpine v3.23 gimp 2.10.36-r0 —
Alpine v3.22 gimp 2.10.36-r0 —
Alpine v3.21 gimp 2.10.36-r0 —
Alpine v3.20 gimp 2.10.36-r0 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 gimp 2.10.36-r0 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 gimp +1 2:2.99.8-4.el9_3 ELSA-2025-7417, ELSA-2025-3617, ELSA-2024-0675

Advisories 21

References