CVE-2025-14425
published 2025-12-23CVE-2025-14425: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
PriorityP345high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.56%
43.2th percentile
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gimp | < gimp 2.10.34-1+deb12u6 (bookworm) | gimp 2.10.34-1+deb12u6 (bookworm) |
| gimp | gimp | — | — |
| gimp | gimp | >= 0 < 2.10.22-4+deb11u5 | 2.10.22-4+deb11u5 |
| gimp | gimp | >= 0 < 2.10.34-1+deb12u6 | 2.10.34-1+deb12u6 |
| gimp | gimp | >= 0 < 3.0.4-3+deb13u4 | 3.0.4-3+deb13u4 |
| gimp | gimp | >= 0 < 3.2.0~RC2-1 | 3.2.0~RC2-1 |
| gimp | gimp | >= 0 < 2.8.16-1ubuntu1.1+esm1 | 2.8.16-1ubuntu1.1+esm1 |
| gimp | gimp | >= 0 < 2.8.22-1ubuntu0.1~esm1 | 2.8.22-1ubuntu0.1~esm1 |
| gimp | gimp | >= 0 < 2.10.18-1ubuntu0.1+esm1 | 2.10.18-1ubuntu0.1+esm1 |
| gimp | gimp | >= 0 < 2.10.30-1ubuntu0.1+esm1 | 2.10.30-1ubuntu0.1+esm1 |
| gimp | gimp | >= 0 < 2.10.36-3ubuntu0.24.04.1+esm1 | 2.10.36-3ubuntu0.24.04.1+esm1 |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GIMP vulnerabilities
vendor_ubuntu·2026-02-23·CVSS 7.8
CVE-2017-17785 [HIGH] GIMP vulnerabilities
Title: GIMP vulnerabilities
Summary: Several security issues were fixed in GIMP.
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)
Michael Randrianantenaina discovered that that opening a maliciously
crafted FLI file could cause GIMP to index out-of-bounds. An attacker could
possibly use this issue to cause a denial or service or execute arbitrary
code. (CVE-2025-2761)
It was discovered that opening a maliciously-crafted DCM file could cause
GIMP to index out-of-bounds. An attacker could possibly u
Red Hat
gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
vendor_redhat·2025-12-23·CVSS 7.8
CVE-2025-14425 [HIGH] CWE-122 gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the JP2 fi
Debian
CVE-2025-14425: gimp - GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi...
vendor_debian·2025·CVSS 7.8
CVE-2025-14425 [HIGH] CVE-2025-14425: gimp - GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi...
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
Scope: local
bookworm: resolved (fixed in 2.10.34-1+deb12u6)
bullseye: resolved (fixed in 2.10.22-4+deb11u5)
forky: resolved (fixed in 3.2.0~RC2-1)
sid: resolved (fixed
OSV
gimp vulnerabilities
osv·2026-02-23·CVSS 7.8
CVE-2017-17785 [HIGH] gimp vulnerabilities
gimp vulnerabilities
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)
Michael Randrianantenaina discovered that that opening a maliciously
crafted FLI file could cause GIMP to index out-of-bounds. An attacker could
possibly use this issue to cause a denial or service or execute arbitrary
code. (CVE-2025-2761)
It was discovered that opening a maliciously-crafted DCM file could cause
GIMP to index out-of-bounds. An attacker could possibly use this issue to
cause a denial of service or execute arbitra
GHSA
GHSA-849v-267v-772m: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ghsa_unreviewed·2025-12-24
CVE-2025-14425 [HIGH] CWE-122 GHSA-849v-267v-772m: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
OSV
CVE-2025-14425: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
osv·2025-12-23·CVSS 7.8
CVE-2025-14425 [HIGH] CVE-2025-14425: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-14425 gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
bugzilla·2025-12-23·CVSS 7.8
CVE-2025-14425 [HIGH] CVE-2025-14425 gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
CVE-2025-14425 gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
Discussion:
This issue has been addressed in the following products:
Wiz
CVE-2025-14425 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.8
CVE-2025-14425 [HIGH] CVE-2025-14425 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-14425 :
NixOS vulnerability analysis and mitigation
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
Source : NVD
## 7.8
Score
Published December 23, 2025
Severity HIGH
CNA Score 7.8
Affected Te
2025-12-23
Published