Read the docs
Red Hat Security Advisory

RHSA-2025:22417

gimp:2.8 security update

Released 2025-12-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2025-10003 CVE-2025-10925 · GHSA-69mp-wcfm-5322

Stack-based buffer overflow in GIMP

Priority MEDIUM 42

GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.03027 Published 2025-10-29 Partial fix CWE-121
TI-2025-10000 CVE-2025-10922 · GHSA-9p8c-493c-qp6m

Heap-based buffer overflow in GIMP

Priority LOW 38

GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0083 Published 2025-10-29 Partial fix CWE-122
TI-2025-10012 CVE-2025-10934 · GHSA-wv7v-cchq-8fjh

Heap-based buffer overflow in GIMP

Priority LOW 37

GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00582 Published 2025-10-29 Partial fix CWE-122
TI-2025-10002 CVE-2025-10924 · GHSA-qg28-3m9m-fp3g

Integer overflow in GIMP

Priority LOW 37

GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00475 Published 2025-10-29 Partial fix CWE-190
TI-2025-10001 CVE-2025-10923 · GHSA-4hq6-c566-v4h6

Integer overflow in GIMP

Priority LOW 37

GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00475 Published 2025-10-29 Partial fix CWE-190
TI-2025-09999 CVE-2025-10921 · GHSA-6pqm-mccv-6977

Heap-based buffer overflow in GIMP

Priority LOW 37

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00578 Published 2025-10-29 Partial fix CWE-122
TI-2025-09998 CVE-2025-10920 · GHSA-2x5h-7fq5-8m9f

Out-of-bounds write in GIMP

Priority LOW 37

GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00475 Published 2025-10-29 Partial fix CWE-787