GIMP
CVE-2025-14422
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver malicious PNM file to victim
-
DeliveryVictim opens file in GIMP
-
ExploitInteger overflow undersizes buffer allocation
-
ExecutionHeap buffer overflow during PNM parse
-
ImpactExecute arbitrary code as current user
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the victim to open an attacker-supplied malicious PNM file (PBM/PGM/PPM/PNM format) in GIMP, or visit a page that causes such a file to be opened - the integer overflow occurs specifically in GIMP's PNM file parser prior to buffer allocation. Limiting factors: mandatory user interaction (UI:R) means the attack cannot fire without the victim actively opening the crafted file; the attack vector is local (AV:L), so there is no network-service exposure; the confirmed affected version is GIMP 3.0.6, and a vendor fix is available. Code executes only with the privileges of the user running GIMP, not elevated/system context. |
| Impact | This is a credible but not emergency-level priority. The CVSS 3.0 base score is 7.8 (High) with vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning low attack complexity, no privileges required, but mandatory user interaction and a LOCAL attack vector. ZDI classifies file-parsing bugs as AV:L because the victim must open a malicious file locally, even though the description frames the attacker as 'remote' - this is a deliberate distinction, not a contradiction: delivery is remote/social-engineering but triggering is local file handling. No EPSS score was provided in the input, so exploitation probability cannot be quantified. The vulnerability is NOT listed in CISA KEV, and no public exploit or POC is referenced (only a ZDI advisory and the upstream patch commit), so there is no public exploit identified at time of analysis. No SSVC decision data was supplied. The realistic risk is therefore moderate: a memory-corruption RCE that is reliable to trigger (AC:L) but gated behind user interaction and lacking any evidence of active or automatable exploitation. It warrants prompt patching for workstations running GIMP, but it is not a mass-exploitation or server-side wormable threat. |
| Exploit ScenarioDerived | An attacker crafts a malicious PNM image file with dimensions/values that trigger an integer overflow in GIMP's PNM parser, causing an undersized buffer allocation and subsequent memory corruption. The attacker emails the file or hosts it on a web page and lures a victim into opening it in GIMP 3.0.6, achieving arbitrary code execution in the context of the current user. No public exploit code is currently identified, but the vulnerability was discovered and documented by Trend Micro ZDI (ZDI-25-1136). |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 19, 2026
Integer overflow in GIMP's PNM file parser allows an attacker to execute arbitrary code in the context of the user who opens a crafted PNM image. The confirmed affected version is GIMP 3.0.6; exploitation requires user interaction (opening a malicious PBM/PGM/PPM/PNM file or causing one to open), and code runs only with the privileges of the GIMP process. No public exploit identified at time of analysis and no CISA KEV entry is present in the supplied data, and a vendor fix is available, making this a credible but not emergency-level priority.
RemediationAI
Apply the vendor fix by upgrading GIMP to a release containing GNOME GIMP GitLab commit 4ff2d773d58064e6130495de498e440f4a6d5edb; the supplied data states that a vendor patch is available but does not give an exact released patched version, so verify the fixed release in the vendor advisory and ZDI-25-1136 (https://www.zerodayinitiative.com/advisories/ZDI-25-1136/). Until upgraded, avoid opening untrusted PNM/PBM/PGM/PPM files or auto-opening attachments, run GIMP with least privilege or in an OS sandbox, and if operationally acceptable restrict or disable the PNM import path as a compensating control, with the trade-off that legitimate PNM support is lost and no patch-version substitute should be assumed from the commit alone.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is in GIMP's PNM parser and maps to CWE-190 (integer overflow). PNM is the Netpbm family of simple image formats, including PBM, PGM, and PPM, where header-supplied dimensions and format data drive allocation calculations. Insufficient validation of user-supplied values can cause size arithmetic to overflow before a buffer is allocated, producing an undersized allocation and memory corruption that can be leveraged for code execution. The supplied CPE identifies GIMP 3.0.6, and the issue was reported through Trend Micro ZDI as ZDI-CAN-28273 / ZDI-25-1136. The assessed CVSS vector is AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, reflecting a local attack that requires the victim to open a crafted file, no privileges required in the vector, and high confidentiality, integrity, and availability impact within the GIMP process.
Know when Gimp gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AV:L because exploitation requires the victim to open a malicious file locally; UI:R for that interaction; PR:N as no account is needed; memory-corruption RCE yields full C/I/A:H.
Primary rating from Vendor (trendmicro).
CVSS VectorVendor: trendmicro
DescriptionCVE.org
GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.
Executive ViewAI
GIMP 3.0.6 contains a high-severity integer overflow in its PNM image parser that can allow a crafted image file to execute code with the privileges of the user who opens it. No public exploit identified at time of analysis, and no CISA KEV entry is present in the supplied data, but a vendor fix is available. Design and content teams that regularly open third-party image files should be prioritized because a successful attack could compromise user accounts and data accessible from their workstations.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and p
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attack
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. Rated high sev
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Rated medium severity (CVSS 5.5), this vulnerability is no a
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that alre
Critical remote code execution vulnerability in GIMP's ICO file parser caused by an integer overflow (CWE-190) that lack
Remote code execution in GIMP 3.0.6 allows attackers to run arbitrary code by tricking a user into opening a malicious P
Remote code execution in GIMP 3.2.0-rc1 lets attackers run arbitrary code by tricking a user into opening a malicious IC
Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cau
Heap-based buffer overflow in GIMP's TIF file parser enables remote code execution when a user opens a crafted TIFF imag
GitHub PoC
Exploit-DB