Critical Remote Code Execution Vulnerability in GIMP Package
Summary
ALSA-2026:0914: Important: gimp security update. Affects gimp versions < 2:3.0.4-1.el9_7.2. Fixed in 2:3.0.4-1.el9_7.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a powerful open-source image editing and manipulation tool widely used for tasks such as photo retouching, image composition, and image authoring. It features a comprehensive toolbox that includes various effects, layers, and advanced image manipulation capabilities. However, GIMP is susceptible to several security vulnerabilities that can lead to remote code execution, particularly through the parsing of specific file formats.
Vulnerability Detail
The vulnerabilities in GIMP arise from improper handling of file formats, leading to potential remote code execution. Specifically, the issues include an integer overflow during PNM file parsing (CVE-2025-14422), a heap-based buffer overflow when parsing JP2 files (CVE-2025-14425), a use-after-free error in XCF file parsing (CVE-2025-14424), and a stack-based buffer overflow in LBM file parsing (CVE-2025-14423). These vulnerabilities can allow an attacker to execute arbitrary code on the victim's machine by crafting malicious files that exploit these weaknesses.
How To Fix
Minimum fixed version
2:3.0.4-1.el9_7.2
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to avoid opening untrusted or unknown PNM, JP2, XCF, or LBM files until the package is updated. Additionally, consider using alternative image editing software that does not have these vulnerabilities.
Conclusion
The GIMP security update addresses critical vulnerabilities that could allow remote code execution through specific file parsing errors. Users are strongly encouraged to update their installations to the latest version to protect against potential exploits. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for gimp →
FAQ
The vulnerabilities can lead to remote code execution, allowing attackers to run arbitrary code on the affected system, potentially compromising sensitive data.
You can use Vulert, which monitors open-source vulnerabilities in your software by analyzing the manifest file like package-lock.json. Visit Vulert Scanner to check for vulnerabilities without signup.
Updating GIMP to the latest version is recommended as it includes security patches that mitigate the vulnerabilities. Always back up your work before updating.
Avoid opening PNM, JP2, XCF, and LBM files from untrusted sources until the vulnerabilities are patched.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory, which provide insights into the nature and impact of each issue.
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
