{"id":"CVE-2025-10921","aliases":["ALSA-2025:21968","ALSA-2025:22417","CLSA-2025-1765988423","CLSA-2025-1765989021","CLSA-2025-1767025227","CLSA-2025-1767025812","DEBIAN-CVE-2025-10921","DLA-4341-1","DSA-6018-1","EUVD-2025-36717","GHSA-6pqm-mccv-6977","RHSA-2025:21968","RHSA-2025:22417","RLSA-2025:21968","RLSA-2025:22417","SUSE-SU-2025:4333-1","SUSE-SU-2025:4335-1","SUSE-SU-2025:4382-1","UBUNTU-CVE-2025-10921","openSUSE-SU-2025:15793-1"],"status":"published","title":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00578,"percentile":0.48079,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2025-10-03T00:00:00Z","modified":"2026-10-29T11:32:29Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04","fixed_in":["0.4.34-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04-devel","fixed_in":["0.4.34-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04-devel-docs","fixed_in":["0.4.34-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04-tools","fixed_in":["0.4.34-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04","fixed_in":["0.4.34-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04-devel","fixed_in":["0.4.34-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04-devel-docs","fixed_in":["0.4.34-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04-tools","fixed_in":["0.4.34-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","fixed_in":["2:2.99.8-4.el9.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel-tools","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-libs","fixed_in":["2:2.99.8-4.el9_6.2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gegl","fixed_in":["1:0.4.42-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gegl","fixed_in":["1:0.4.62-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gegl","fixed_in":["1:0.4.62-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"gegl","fixed_in":["0.3.34-150000.3.6.1","0.4.46-150600.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gegl","fixed_in":["0.3.34-150000.3.6.1","0.4.46-150600.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"gegl","fixed_in":["0.4.46-150600.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gegl","fixed_in":["0.4.46-150600.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"gegl","fixed_in":["0.4.46-150600.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gegl","fixed_in":["0.2.0-15.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gegl","fixed_in":["0.2.0-15.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gegl","fixed_in":["0.4.64-3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gegl04-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gegl04-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.34-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.42-2+deb12u1"}]}],"versions":["1:0.4.42-2"]},{"source":"osv","ecosystem":"Debian:13","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.62-2+deb13u1"}]}],"versions":["1:0.4.62-2"]},{"source":"osv","ecosystem":"Debian:14","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.62-3.1"}]}],"versions":["1:0.4.62-2","1:0.4.62-2+hurd.1","1:0.4.62-3"]},{"source":"osv","ecosystem":"Debian:11","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.26-2+deb11u1"}]}],"versions":["1:0.4.26-2"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.42-2+deb12u1"}]}],"versions":["1:0.4.42-2"]},{"source":"osv","ecosystem":"Debian:13","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.4.62-2+deb13u1"}]}],"versions":["1:0.4.62-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40033+6fd27379.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1927+52edb5a0"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+1927+52edb5a0"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+1723+9bc93544"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+1927+52edb5a0"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.34-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.34-150000.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.46-150600.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.46-150600.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.46-150600.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.46-150600.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.46-150600.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-15.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-15.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.0-4ubuntu2","0.3.2-1ubuntu1","0.3.2-1ubuntu2","0.3.4-1ubuntu1","0.3.4-1ubuntu2","0.3.4-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.3.20-1","0.3.20-3","0.3.24-1","0.3.28-3","0.3.30-1","0.3.30-1ubuntu1","0.3.30-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.4.14-1","0.4.18-1ubuntu1","0.4.18-2","0.4.18-2build1","0.4.22-1","0.4.22-3","0.4.22-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.32-1","1:0.4.32-2","1:0.4.34-1","1:0.4.34-1build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.44-3ubuntu1","1:0.4.46-4","1:0.4.48-1","1:0.4.48-2.4build1","1:0.4.48-2.4build2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.58-1","1:0.4.58-2","1:0.4.62-1","1:0.4.62-2","1:0.4.62-3","1:0.4.62-3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.70-1","1:0.4.70-3build1","1:0.4.70-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.62-3.1","1:0.4.64-1","1:0.4.64-2","1:0.4.66-2","1:0.4.66-3","1:0.4.68-1","1:0.4.70-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gegl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.64-3.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gimp","product":"gimp"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-910/","tags":["x_research-advisory","Third Party Advisory","advisory","article"]},{"url":"https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f","tags":["vendor-advisory","Patch","advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00021.html","tags":["Mailing List","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10921","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-910"},{"url":"https://github.com/advisories/GHSA-6pqm-mccv-6977"},{"url":"https://access.redhat.com/errata/RHSA-2025:21968","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10920","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10921","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10922","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10923","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10924","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10925","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10934","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407188","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407191","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407192","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407194","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407199","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407200","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407233","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-21968.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22417","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-22417.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1765988423.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1765989021.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1767025227.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2025-1767025812.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10921.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-10921","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407233","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21968.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10920","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-909/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10921","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10922","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/3d909166463731e94dfe62042d76225ecfc4c1e4","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-911/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10923","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/2d2d39f3da1d0b01ca7d71ad2b7a8725ee92ed96","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-912/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10924","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10924","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2448","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-913/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10925","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2450","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-914/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10934","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/5c3e2122d53869599d77ef0f1bdece117b24fd7c","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-978/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22417.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21968","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22417","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254333-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250496","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10921","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254335-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254382-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-10921","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gegl/-/issues/430","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-10921","title":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T19:29:39.135Z","modified":"2026-02-26T16:56:59.669Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:30.643267Z"}],"euvd":[{"id":"EUVD-2025-36717","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T19:29:39Z","modified":"2026-02-26T16:56:59Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:25.204929Z"}],"ghsa":[{"id":"GHSA-6pqm-mccv-6977","title":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T21:30:33Z","modified":"2025-11-04T15:32:35Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:04:32.843339Z"}],"nvd":[{"id":"CVE-2025-10921","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T20:15:34.797Z","modified":"2026-10-19T13:10:00.11Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:11:41.607433Z"}],"osv":[{"id":"CVE-2025-10921","title":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T19:29:39.135Z","modified":"2026-10-28T10:40:34.062792683Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:45.712478Z"},{"id":"DEBIAN-CVE-2025-10921","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T20:15:34.797Z","modified":"2026-10-23T17:47:26.56052778Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"RHSA-2025:21968","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-11-25T10:06:02Z","modified":"2026-07-12T10:05:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22417","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2025-12-02T10:06:45Z","modified":"2026-07-12T10:05:38Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RLSA-2025:21968","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n\n* gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n\n* gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n\n* gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n\n* gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n\n* gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n\n* gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-25T09:10:47.018336Z","modified":"2025-11-25T09:49:03.414069Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:22417","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n\n* gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n\n* gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n\n* gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n\n* gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n\n* gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n\n* gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-02T09:02:34.427267Z","modified":"2025-12-02T10:49:13.398255Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-10921","description":"GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.","status":"published","published":"2025-10-29T20:15:00Z","modified":"2026-10-17T12:56:47.78629861Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"ALSA-2025:21968","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n  * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n  * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n  * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n  * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n  * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n  * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-24T00:00:00Z","modified":"2026-10-29T11:32:29.014474964Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:22417","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n  * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n  * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n  * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n  * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n  * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n  * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-01T00:00:00Z","modified":"2026-10-29T11:02:22.783062686Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1765988423","title":"gegl04: Fix of CVE-2025-10921","description":"- CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability","status":"published","published":"2025-12-17T16:20:27Z","modified":"2026-06-01T00:31:33.137707223Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1765989021","title":"gegl04: Fix of CVE-2025-10921","description":"- CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability","status":"published","published":"2025-12-17T16:30:26Z","modified":"2026-06-01T00:32:37.100545765Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1767025227","title":"gimp: Fix of CVE-2025-10921","description":"- CVE-2025-10921: fix vulnerability by updating gegl04 dependency requirement to\n  gegl04 \u003e= 0.4.34-2.el9.tuxcare.els1","status":"published","published":"2025-12-29T16:20:31Z","modified":"2026-06-01T00:31:34.264257252Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2025-1767025812","title":"gimp: Fix of CVE-2025-10921","description":"- CVE-2025-10921: fix vulnerability by updating gegl04 dependency requirement to\n  gegl04 \u003e= 0.4.34-2.el9.tuxcare.els1","status":"published","published":"2025-12-29T16:30:16Z","modified":"2026-06-01T00:32:40.297958349Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4341-1","title":"gegl - security update","status":"published","published":"2025-10-22T00:00:00Z","modified":"2025-10-22T19:17:52.772831Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6018-1","title":"gegl - security update","status":"published","published":"2025-10-03T00:00:00Z","modified":"2025-10-03T14:16:54.694694Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"openSUSE-SU-2025:15793-1","title":"gegl-0.4.64-3.1 on GA media","description":"These are all security issues fixed in the gegl-0.4.64-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-12-02T00:00:00Z","modified":"2026-03-23T04:54:11.366186Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"SUSE-SU-2025:4333-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2025-10921: Fixed HDR file parsing heap-based buffer overflow that can lead to remote code execution. (bsc#1250496)\n","status":"published","published":"2025-12-09T14:42:10Z","modified":"2026-02-04T03:31:21.249459Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4335-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2025-10921: lack of proper validation of user-supplied data when parsing HDR files can lead to RCE (bsc#1250496).\n","status":"published","published":"2025-12-09T18:19:44Z","modified":"2026-02-04T02:45:21.859817Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:4382-1","title":"Security update for gegl","description":"This update for gegl fixes the following issues:\n\n- CVE-2025-10921: Fixed HDR file parsing heap-based buffer overflow that can lead to remote code execution. (bsc#1250496)\n","status":"published","published":"2025-12-12T13:06:54Z","modified":"2026-02-04T03:38:22.005779Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}