Red Hat Security AdvisoryRHSA-2025:22417
gimp:2.8 security update
Released 2025-12-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) gimp-2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3.aarch64::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3.ppc64le::gimp:2.8, gimp-2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3.s390x::gimp:2.8 +47
Fixes 7 records
Priority MEDIUM 42
GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.03027 · Published 2025-10-29 · Partial fix CWE-121
Priority LOW 38
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0083 · Published 2025-10-29 · Partial fix CWE-122
Priority LOW 37
GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00582 · Published 2025-10-29 · Partial fix CWE-122
Priority LOW 37
GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00475 · Published 2025-10-29 · Partial fix CWE-190
Priority LOW 37
GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00475 · Published 2025-10-29 · Partial fix CWE-190
Priority LOW 37
GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00578 · Published 2025-10-29 · Partial fix CWE-122
Priority LOW 37
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00475 · Published 2025-10-29 · Partial fix CWE-787