Critical Remote Code Execution Vulnerability in GIMP Package
Summary
ALSA-2026:1574: Important: gimp:2.8 security update. Affects gimp versions < 2:2.8.22-26.module_el8.10.0+4109+804f132c.4. Fixed in 2:2.8.22-26.module_el8.10.0+4109+804f132c.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a widely used open-source image editing software that provides a comprehensive suite of tools for image manipulation, including layers, effects, and multi-level undo capabilities. It is popular among graphic designers and photographers for its versatility and extensive feature set. However, GIMP has been found to have a critical vulnerability that could allow attackers to execute arbitrary code remotely through improper handling of PNM file parsing.
Vulnerability Detail
The vulnerability identified as CVE-2025-14422 is an integer overflow issue that occurs during the parsing of PNM files in GIMP. This flaw can be exploited by an attacker to craft a malicious PNM file that, when opened by GIMP, could lead to remote code execution. The implications of this vulnerability are severe, as it could allow an attacker to gain unauthorized access to the system, execute arbitrary commands, or compromise sensitive data.
How To Fix
Minimum fixed version
2:2.8.22-26.module_el8.10.0+4109+804f132c.4
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, users are advised to avoid opening untrusted PNM files or to use alternative image editing software until the update can be applied.
Conclusion
The critical vulnerability in GIMP poses a significant risk to users, allowing for remote code execution through malicious PNM files. It is crucial to update to the latest patched version to safeguard against potential exploits. Users should remain vigilant and avoid opening untrusted files until the update is applied.
See every vulnerability recorded for gimp →
FAQ
The vulnerability is an integer overflow that can lead to remote code execution when processing malicious PNM files.
If you are using a version prior to 2:2.8.22-26.module_el8.10.0+4109+804f132c.4, your installation is vulnerable.
Avoid opening any untrusted PNM files and consider using alternative software until you can apply the update.
You can refer to the CVE page for CVE-2025-14422 for detailed information about the vulnerability.
Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in your software, ensuring you stay informed about potential risks.
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
