PT-2025-39344 · Gimp+6 · Gimp+6

Published 2025-01-01 · Updated 2025-12-16 · CVE-2025-10923

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description An integer overflow exists in the WBMP file parsing functionality of GIMP. This issue could allow for remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2025:21968

ALSA-2025:22417

BDU:2025-16102

CESA-2025_22417

CVE-2025-10923

DSA-6014-1

INFSA-2025_21968

INFSA-2025_22417

OESA-2025-2362

OESA-2025-2363

OESA-2025-2364

RHSA-2025_21968

ZDI-25-912

Affected Products

Almalinux

Centos

Debian

Gimp

Red Hat

Red Os

Rocky Linux

References · 52

• https://osv.dev/vulnerability/DEBIAN-CVE-2025-10923 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-912 · Security Note
• https://errata.almalinux.org/9/ALSA-2025-21968.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10920 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2362 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-21968.html · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/724903 · Security Note
• https://osv.dev/vulnerability/ALSA-2025:22417 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10923 · Security Note
• https://ubuntu.com/security/CVE-2025-10923 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10923 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-10923 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10922 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10924 · Security Note
• https://errata.almalinux.org/8/ALSA-2025-22417.html · Vendor Advisory