Critical Remote Code Execution Vulnerability in GIMP Package
Summary
RLSA-2025:7417: Important: gimp security update. Affects gimp versions < 2:2.99.8-4.el9_3. Fixed in 2:2.99.8-4.el9_3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GIMP (GNU Image Manipulation Program) is a powerful open-source image composition and editing tool widely used for tasks such as photo retouching, image editing, and graphic design. It features a comprehensive toolbox that includes channel operations, layers, effects, sub-pixel imaging, anti-aliasing, and multi-level undo capabilities. However, recent vulnerabilities have exposed GIMP to significant security risks, particularly in its handling of various image file formats.
Vulnerability Detail
The GIMP package has been identified with multiple critical vulnerabilities that allow for remote code execution (RCE). These vulnerabilities stem from buffer overflows and integer overflows when processing DDS, PSD, and PSP files. Specifically, CVE-2023-44441, CVE-2023-44442, CVE-2023-44443, and CVE-2023-44444 highlight the potential for attackers to exploit these weaknesses, leading to unauthorized code execution, which could compromise system integrity and user data.
How To Fix
Minimum fixed version
2:2.99.8-4.el9_3
This is the first release that contains the fix.
sudo dnf update gimpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users are advised to avoid opening untrusted DDS, PSD, and PSP files until the package is updated. Additionally, consider using alternative image editing software that does not exhibit these vulnerabilities.
Conclusion
The GIMP package has critical vulnerabilities that pose significant risks to users. It is crucial to update to the latest patched version to protect against potential remote code execution attacks. Users should remain vigilant and consider using tools like Vulert to monitor their applications for vulnerabilities.
See every vulnerability recorded for gimp →
FAQ
The CVSS score of the vulnerabilities in GIMP is 7.8, indicating a high severity level.
You can use Vulert, which monitors open-source vulnerabilities in your software. By simply uploading your manifest file like package-lock.json, you can receive real-time alerts about vulnerabilities.
If you cannot update GIMP right away, avoid opening any untrusted image files, especially DDS, PSD, and PSP formats, to mitigate the risk of exploitation.
Yes, the vulnerabilities have been documented and are known to allow remote code execution, which can be exploited by attackers to gain unauthorized access to systems.
For more details, you can refer to the CVE pages for CVE-2023-44441, CVE-2023-44442, CVE-2023-44443, and CVE-2023-44444.
References
Related vulnerabilities
Recent vulnerabilities recorded for gimp.
