A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gimpalma-upgrade-gimp-develalma-upgrade-gimp-devel-toolsalma-upgrade-gimp-libsalma-upgrade-pygobject2alma-upgrade-pygobject2-codegenalma-upgrade-pygobject2-develalma-upgrade-pygobject2-docalma-upgrade-pygtk2alma-upgrade-pygtk2-codegenalma-upgrade-pygtk2-develalma-upgrade-pygtk2-docalma-upgrade-python2-cairoalma-upgrade-python2-cairo-devel | Jul 1, 2025 | May 27, 2025 | |
| Debian | debian-upgrade-gimp | May 28, 2025 | May 28, 2025 | |
| Oracle_linux | oracle-linux-upgrade-gimporacle-linux-upgrade-gimp-develoracle-linux-upgrade-gimp-devel-toolsoracle-linux-upgrade-gimp-libsoracle-linux-upgrade-pygobject2oracle-linux-upgrade-pygobject2-codegenoracle-linux-upgrade-pygobject2-develoracle-linux-upgrade-pygobject2-docoracle-linux-upgrade-pygtk2oracle-linux-upgrade-pygtk2-codegenoracle-linux-upgrade-pygtk2-develoracle-linux-upgrade-pygtk2-docoracle-linux-upgrade-python2-cairooracle-linux-upgrade-python2-cairo-devel | Jun 30, 2025 | May 26, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-gimpredhat-upgrade-gimp-debuginforedhat-upgrade-gimp-debugsourceredhat-upgrade-gimp-develredhat-upgrade-gimp-devel-toolsredhat-upgrade-gimp-devel-tools-debuginforedhat-upgrade-gimp-libsredhat-upgrade-gimp-libs-debuginforedhat-upgrade-pygobject2redhat-upgrade-pygobject2-codegenredhat-upgrade-pygobject2-debuginforedhat-upgrade-pygobject2-debugsourceredhat-upgrade-pygobject2-develredhat-upgrade-pygobject2-docredhat-upgrade-pygtk2redhat-upgrade-pygtk2-codegenredhat-upgrade-pygtk2-debuginforedhat-upgrade-pygtk2-debugsourceredhat-upgrade-pygtk2-develredhat-upgrade-pygtk2-docredhat-upgrade-python2-cairoredhat-upgrade-python2-cairo-debuginforedhat-upgrade-python2-cairo-develredhat-upgrade-python2-pycairo-debugsource | Jun 18, 2025 | May 27, 2025 | |
| Rocky_linux | rocky-upgrade-gimprocky-upgrade-gimp-debuginforocky-upgrade-gimp-debugsourcerocky-upgrade-gimp-develrocky-upgrade-gimp-devel-toolsrocky-upgrade-gimp-devel-tools-debuginforocky-upgrade-gimp-libsrocky-upgrade-gimp-libs-debuginforocky-upgrade-pygobject2rocky-upgrade-pygobject2-codegenrocky-upgrade-pygobject2-debuginforocky-upgrade-pygobject2-debugsourcerocky-upgrade-pygobject2-develrocky-upgrade-pygobject2-docrocky-upgrade-pygtk2rocky-upgrade-pygtk2-codegenrocky-upgrade-pygtk2-debuginforocky-upgrade-pygtk2-debugsourcerocky-upgrade-pygtk2-develrocky-upgrade-python2-cairorocky-upgrade-python2-cairo-debuginforocky-upgrade-python2-cairo-develrocky-upgrade-python2-pycairo-debugsource | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-gimpsuse-upgrade-gimp-develsuse-upgrade-gimp-langsuse-upgrade-gimp-plugin-aasuse-upgrade-libgimp-2_0-0suse-upgrade-libgimp-2_0-0-32bitsuse-upgrade-libgimpui-2_0-0suse-upgrade-libgimpui-2_0-0-32bit | Dec 5, 2025 | Jun 21, 2025 |
| Ubuntu | ubuntu-pro-upgrade-gimpubuntu-pro-upgrade-libgimp2-0ubuntu-pro-upgrade-libgimp2-0t64 | Mar 9, 2026 | Mar 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub