CVE-2025-10922
published 2025-10-29CVE-2025-10922: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
PriorityP346high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.64%
46.8th percentile
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | gimp | < gimp 2.10.34-1+deb12u4 (bookworm) | gimp 2.10.34-1+deb12u4 (bookworm) |
| gimp | gimp | — | — |
| gimp | gimp | >= 0 < 2.10.22-4+deb11u3 | 2.10.22-4+deb11u3 |
| gimp | gimp | >= 0 < 2.10.34-1+deb12u4 | 2.10.34-1+deb12u4 |
| gimp | gimp | >= 0 < 3.0.4-3+deb13u1 | 3.0.4-3+deb13u1 |
| gimp | gimp | >= 0 < 3.0.4-6.1 | 3.0.4-6.1 |
| gimp | gimp | >= 0 < 2.8.16-1ubuntu1.1+esm1 | 2.8.16-1ubuntu1.1+esm1 |
| gimp | gimp | >= 0 < 2.8.22-1ubuntu0.1~esm1 | 2.8.22-1ubuntu0.1~esm1 |
| gimp | gimp | >= 0 < 2.10.18-1ubuntu0.1+esm1 | 2.10.18-1ubuntu0.1+esm1 |
| gimp | gimp | >= 0 < 2.10.30-1ubuntu0.1+esm1 | 2.10.30-1ubuntu0.1+esm1 |
| gimp | gimp | >= 0 < 2.10.36-3ubuntu0.24.04.1+esm1 | 2.10.36-3ubuntu0.24.04.1+esm1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
gimp vulnerabilities
osv·2026-02-23·CVSS 7.8
CVE-2017-17785 [HIGH] gimp vulnerabilities
gimp vulnerabilities
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)
Michael Randrianantenaina discovered that that opening a maliciously
crafted FLI file could cause GIMP to index out-of-bounds. An attacker could
possibly use this issue to cause a denial or service or execute arbitrary
code. (CVE-2025-2761)
It was discovered that opening a maliciously-crafted DCM file could cause
GIMP to index out-of-bounds. An attacker could possibly use this issue to
cause a denial of service or execute arbitra
OSV
CVE-2025-10922: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
osv·2025-10-29·CVSS 7.8
CVE-2025-10922 [HIGH] CVE-2025-10922: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.
GHSA
GHSA-9p8c-493c-qp6m: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ghsa_unreviewed·2025-10-29
CVE-2025-10922 [HIGH] CWE-122 GHSA-9p8c-493c-qp6m: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.
Ubuntu
GIMP vulnerabilities
vendor_ubuntu·2026-02-23·CVSS 7.8
CVE-2017-17785 [HIGH] GIMP vulnerabilities
Title: GIMP vulnerabilities
Summary: Several security issues were fixed in GIMP.
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)
Michael Randrianantenaina discovered that that opening a maliciously
crafted FLI file could cause GIMP to index out-of-bounds. An attacker could
possibly use this issue to cause a denial or service or execute arbitrary
code. (CVE-2025-2761)
It was discovered that opening a maliciously-crafted DCM file could cause
GIMP to index out-of-bounds. An attacker could possibly u
Red Hat
gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
vendor_redhat·2025-10-29·CVSS 7.8
CVE-2025-10922 [HIGH] CWE-122 gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.
A heap-based buffer overflow vulnerability was discovered in GIMP’s DICOM (D
Debian
CVE-2025-10922: gimp - GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi...
vendor_debian·2025·CVSS 7.8
CVE-2025-10922 [HIGH] CVE-2025-10922: gimp - GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi...
GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.
Scope: local
bookworm: resolved (fixed in 2.10.34-1+deb12u4)
bullseye: resolved (fixed in 2.10.22-4+deb11u3)
forky: resolved (fixed in 3.0.4-6.1)
sid: resolved (fixed in
No detection rules found.
No public exploits indexed.
2025-10-29
Published