Critical Remote Code Execution Vulnerabilities in GIMP Package
Summary
ALSA-2025:22417: Important: gimp:2.8 security update. Affects gimp versions < 2:2.8.22-26.module_el8.10.0+4070+64105a56.3. Fixed in 2:2.8.22-26.module_el8.10.0+4070+64105a56.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a powerful open-source image editing software that provides a comprehensive toolbox for image manipulation, including features like layers, effects, and multi-level undo. It is widely used for tasks such as photo retouching, image composition, and image authoring. However, GIMP has recently been identified to have several critical vulnerabilities that could allow remote code execution through maliciously crafted files.
Vulnerability Detail
The vulnerabilities in GIMP stem from improper handling of various file formats, leading to potential heap-based and stack-based buffer overflows, as well as integer overflows. Specifically, vulnerabilities such as CVE-2025-10920 and CVE-2025-10922 allow attackers to exploit these weaknesses by crafting malicious files that, when opened in GIMP, could execute arbitrary code on the user's system. This poses a significant risk as it could lead to unauthorized access, data breaches, or system compromise.
How To Fix
Minimum fixed version
2:2.8.22-26.module_el8.10.0+4070+64105a56.3
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to avoid opening untrusted files in GIMP until the update is applied. Additionally, consider using alternative image editing software that does not have these vulnerabilities.
Conclusion
In summary, GIMP has critical vulnerabilities that could lead to remote code execution. Users are strongly advised to update their installations to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for gimp →
FAQ
GIMP is an open-source image manipulation program used for tasks such as photo editing, image composition, and graphic design.
The vulnerabilities could allow attackers to execute arbitrary code on a user's system, potentially leading to data loss or unauthorized access.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without requiring any signup.
If immediate updates are not possible, avoid opening files from untrusted sources and consider using alternative software until the vulnerabilities are patched.
More information can be found on the CVE pages listed in the advisory, which detail the specific vulnerabilities and their impacts.
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
