CVE-2025-15059
published 2026-01-23CVE-2025-15059: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
PriorityP346high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.74%
50.7th percentile
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gimp | < gimp 2.10.34-1+deb12u7 (bookworm) | gimp 2.10.34-1+deb12u7 (bookworm) |
| gimp | gimp | — | — |
| gimp | gimp | >= 0 < 2.10.22-4+deb11u6 | 2.10.22-4+deb11u6 |
| gimp | gimp | >= 0 < 2.10.34-1+deb12u7 | 2.10.34-1+deb12u7 |
| gimp | gimp | >= 0 < 3.0.4-3+deb13u5 | 3.0.4-3+deb13u5 |
| gimp | gimp | >= 0 < 3.2.0~RC2-3.1 | 3.2.0~RC2-3.1 |
| gimp | gimp | >= 0 < 2.8.16-1ubuntu1.1+esm1 | 2.8.16-1ubuntu1.1+esm1 |
| gimp | gimp | >= 0 < 2.8.22-1ubuntu0.1~esm1 | 2.8.22-1ubuntu0.1~esm1 |
| gimp | gimp | >= 0 < 2.10.18-1ubuntu0.1+esm1 | 2.10.18-1ubuntu0.1+esm1 |
| gimp | gimp | >= 0 < 2.10.30-1ubuntu0.1+esm1 | 2.10.30-1ubuntu0.1+esm1 |
| gimp | gimp | >= 0 < 2.10.36-3ubuntu0.24.04.1+esm1 | 2.10.36-3ubuntu0.24.04.1+esm1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
GIMP PSP File Parser heap-based overflow (ZDI-25-1196 / Nessus ID 282541)
vuldb·2026-06-30·CVSS 7.8
CVE-2025-15059 [HIGH] GIMP PSP File Parser heap-based overflow (ZDI-25-1196 / Nessus ID 282541)
A vulnerability was found in GIMP. It has been declared as critical. This affects an unknown part of the component PSP File Parser. The manipulation results in heap-based buffer overflow.
This vulnerability is identified as CVE-2025-15059. The attack can be executed remotely. There is not any exploit available.
Applying a patch is advised to resolve this issue.
OSV
gimp vulnerabilities
osv·2026-02-23·CVSS 7.8
CVE-2017-17785 [HIGH] gimp vulnerabilities
gimp vulnerabilities
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)
Michael Randrianantenaina discovered that that opening a maliciously
crafted FLI file could cause GIMP to index out-of-bounds. An attacker could
possibly use this issue to cause a denial or service or execute arbitrary
code. (CVE-2025-2761)
It was discovered that opening a maliciously-crafted DCM file could cause
GIMP to index out-of-bounds. An attacker could possibly use this issue to
cause a denial of service or execute arbitra
OSV
CVE-2025-15059: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
osv·2026-01-23·CVSS 7.8
CVE-2025-15059 [HIGH] CVE-2025-15059: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
GHSA
GHSA-h948-x7vm-x59c: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ghsa_unreviewed·2026-01-23
CVE-2025-15059 [HIGH] CWE-122 GHSA-h948-x7vm-x59c: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
Ubuntu
GIMP vulnerabilities
vendor_ubuntu·2026-02-23·CVSS 7.8
CVE-2017-17785 [HIGH] GIMP vulnerabilities
Title: GIMP vulnerabilities
Summary: Several security issues were fixed in GIMP.
Hanno Böck discovered that GIMP allocated FLI images using only the
information present in the file header, which allowed for a maliciously-
crafted file to cause out-of-bounds writes. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code. This
issue only affected Ubuntu 16.04 LTS. (CVE-2017-17785)
Michael Randrianantenaina discovered that that opening a maliciously
crafted FLI file could cause GIMP to index out-of-bounds. An attacker could
possibly use this issue to cause a denial or service or execute arbitrary
code. (CVE-2025-2761)
It was discovered that opening a maliciously-crafted DCM file could cause
GIMP to index out-of-bounds. An attacker could possibly u
Red Hat
gimp: heap-based buffer overflow via specially crafted PSP file
vendor_redhat·2026-01-23·CVSS 7.8
CVE-2025-15059 [HIGH] CWE-122 gimp: heap-based buffer overflow via specially crafted PSP file
gimp: heap-based buffer overflow via specially crafted PSP file
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer
Debian
CVE-2025-15059: gimp - GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi...
vendor_debian·2025·CVSS 7.8
CVE-2025-15059 [HIGH] CVE-2025-15059: gimp - GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabi...
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
Scope: local
bookworm: resolved (fixed in 2.10.34-1+deb12u7)
bullseye: resolved (fixed in 2.10.22-4+deb11u6)
forky: resolved (fixed in 3.2.0~RC2-3.1)
sid: resolved (fixe
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-15059 gimp: heap-based buffer overflow via specially crafted PSP file
bugzilla·2026-01-23·CVSS 7.8
CVE-2025-15059 [HIGH] CVE-2025-15059 gimp: heap-based buffer overflow via specially crafted PSP file
CVE-2025-15059 gimp: heap-based buffer overflow via specially crafted PSP file
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
Discussion:
This issue has been addressed in the following products:
Red Hat Enterpri
Wiz
CVE-2025-15059 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.8
CVE-2025-15059 [HIGH] CVE-2025-15059 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-15059 :
NixOS vulnerability analysis and mitigation
GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28232.
Source : NVD
## 7.8
Score
Published January 23, 2026
Severity HIGH
CNA Score 7.8
Affected Tec
https://gitlab.gnome.org/GNOME/gimp/-/commit/03575ac8cbb0ef3103b0a15d6598475088dcc15ehttps://www.zerodayinitiative.com/advisories/ZDI-25-1196/https://access.redhat.com/errata/RHSA-2026:2707https://access.redhat.com/errata/RHSA-2026:2930https://access.redhat.com/errata/RHSA-2026:2950https://access.redhat.com/errata/RHSA-2026:2953https://access.redhat.com/errata/RHSA-2026:2969https://access.redhat.com/security/cve/CVE-2025-15059https://bugzilla.redhat.com/show_bug.cgi?id=2432296https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15059.json
2026-01-23
Published