Threat Intelligence Database

Two security vulnerabilities have been identified in GIMP (GNU Image Manipulation Program) affecting Red Hat Enterprise Linux 9. These include a stack buffer overflow in the pnmscanner_gettoken() function (CVE-2026-58380) and an integer overflow in the read_RLE_channel() function (CVE-2026-58384). Red Hat has issued a security advisory and released updated packages to address these issues. The vulnerabilities are rated with an important security impact by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 9 variants are advised to apply the provided updates to mitigate these vulnerabilities.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922) * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920) * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923) * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921) * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925) * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924) * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple remote code execution vulnerabilities have been identified in GIMP, the GNU Image Manipulation Program, affecting its parsing of PGM, XWD, and ICO image file formats. These vulnerabilities could allow an attacker to execute arbitrary code remotely by exploiting uninitialized memory usage, out-of-bounds writes, and parsing flaws. Red Hat has issued a security update for GIMP in Red Hat Enterprise Linux 9.6 Extended Update Support to address these issues.

Multiple remote code execution vulnerabilities have been identified in GIMP (GNU Image Manipulation Program) related to parsing of PGM, XWD, and ICO image file formats. These vulnerabilities could allow an attacker to execute arbitrary code remotely by exploiting uninitialized memory, out-of-bounds writes, and other parsing errors. Red Hat has issued a security advisory for GIMP on Red Hat Enterprise Linux 9.2, providing updated packages to address these issues.

Multiple remote code execution vulnerabilities have been identified in GIMP (GNU Image Manipulation Program) related to parsing of PGM, XWD, and ICO image files. These vulnerabilities could allow an attacker to execute arbitrary code via crafted image files. Red Hat has issued a security update for GIMP in Red Hat Enterprise Linux 9.4 Extended Update Support to address these issues.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922) * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: Multiple use after free in XCF parser (CVE-2025-48798) * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797) * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.