Critical Remote Code Execution Vulnerability in GIMP Package
Summary
RLSA-2025:3617: Important: gimp security update. Affects gimp versions < 2:2.99.8-4.el9_3. Fixed in 2:2.99.8-4.el9_3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
GIMP (GNU Image Manipulation Program) is a powerful open-source image composition and editing tool widely used for tasks such as photo retouching, image editing, and graphic design. It offers a comprehensive toolbox that includes features like layers, effects, and multi-level undo. However, recent vulnerabilities have been identified that could allow attackers to exploit the software, leading to severe security risks.
Vulnerability Detail
The GIMP package has been found to contain multiple buffer overflow vulnerabilities that can lead to remote code execution (RCE). Specifically, these vulnerabilities arise from improper handling of DDS, PSD, and PSP file formats. Attackers can exploit these vulnerabilities by crafting malicious files that, when opened in GIMP, could execute arbitrary code on the user's machine. The vulnerabilities are identified as CVE-2023-44441, CVE-2023-44442, CVE-2023-44443, and CVE-2023-44444, with a CVSS score of 7.8, indicating a high severity level.
How To Fix
Minimum fixed version
2:2.99.8-4.el9_3
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to avoid opening untrusted DDS, PSD, or PSP files in GIMP until the package is updated. Additionally, consider using alternative image editing software that does not have these vulnerabilities.
Conclusion
The GIMP package has critical vulnerabilities that can lead to remote code execution. Users are strongly advised to update to the latest patched version to mitigate these risks. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for gimp →
FAQ
The vulnerabilities are buffer overflow issues that can lead to remote code execution when malicious files are opened.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
Avoid opening any untrusted image files in GIMP and consider using alternative software until you can apply the update.
The vulnerabilities are associated with CVEs: CVE-2023-44441, CVE-2023-44442, CVE-2023-44443, and CVE-2023-44444.
The CVSS score of the vulnerabilities is 7.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
