GIMP
CVE-2025-14425
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted JP2 file to victim
-
ExploitUser opens malicious image in GIMP
-
ExecutionOverflow heap buffer in JP2 parser
-
ImpactExecute arbitrary code as current user
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Heap buffer bounds checking
MITRE ATT&CK
1 technique across 1 tactic: Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the victim to open or render an attacker-supplied malformed JP2 (JPEG 2000) file in GIMP 3.0.6 - either by opening it directly or via a page/workflow that causes GIMP to parse it (UI:R). The limiting factors are significant: the attack vector is local/file-based (AV:L), so there is no remote network-reachable surface; successful exploitation depends on mandatory user interaction and on the victim having GIMP installed and using it to process the untrusted JP2 file. No special GIMP configuration is required beyond default JP2 file-parsing support, and no authentication is involved in the file-open action itself. |
| Impact | This is a moderate-priority, exploitation-requires-user-interaction code execution flaw rather than a mass-exploitation emergency. The CVSS 3.0 base score of 7.8 (HIGH) is driven by full C/I/A impact, but the vector tempers real-world urgency: AV:L (local) and UI:R mean an attacker cannot reach a victim remotely without tricking them into opening or rendering a malicious JP2 file - the description's phrase 'remote attackers' refers to remote delivery of a file, not network-reachable exploitation, which is consistent with the AV:L rating. AC:L and PR:N indicate that once a crafted file is opened no special privileges or complex preconditions are needed, so reliability of the memory-corruption primitive is the main gating factor. No EPSS score, SSVC decision, or KEV entry was supplied, and no public POC is referenced - only a vendor patch and the originating ZDI advisory - so exploitation signals are currently absent. Net: a genuine, patch-worthy RCE in a popular desktop application, but the required user interaction and local attack vector place it below internet-facing, unauthenticated flaws in triage order. Verify patch deployment on endpoints where GIMP processes untrusted images. |
| Exploit ScenarioDerived | An attacker crafts a malicious JP2 (JPEG 2000) image with an oversized data segment and delivers it via email attachment, a download link, or a malicious web page. When a GIMP 3.0.6 user opens or previews the file, the JP2 parser copies the unvalidated data into an undersized heap buffer, overflowing it and letting the attacker execute arbitrary code in the context of the user running GIMP. No public exploit code is referenced, so exploitation would currently require independent weaponization of the ZDI-disclosed flaw. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 19, 2026
Heap-based buffer overflow in GIMP 3.0.6's JPEG 2000 (JP2) file parser enables arbitrary code execution in the context of the current process when a victim opens a crafted JP2 file; the attack is file-based (AV:L) and requires user interaction (UI:R), and no public exploit code was identified at time of analysis. This is a moderate-priority, user-interaction-dependent code execution flaw rather than a mass-exploitation emergency.
RemediationAI
Patch status is: upstream fix available (commit); released patched version not independently confirmed. Apply the vendor fix referenced by upstream commit cd1c88a0364ad1444c06536731972a99bd8643fd (https://gitlab.gnome.org/GNOME/gimp/-/commit/cd1c88a0364ad1444c06536731972a99bd8643fd), and check the GIMP vendor advisory/ZDI-25-1139 (https://www.zerodayinitiative.com/advisories/ZDI-25-1139/) for the exact fixed release and upgrade GIMP 3.0.6 accordingly. Until a patched release is confirmed and deployed, reduce exposure by preventing GIMP from opening untrusted JP2 files, for example by quarantining or denying .jp2 attachments and downloads that would be opened in GIMP, or by processing such files only in a disposable sandbox or VM with no sensitive data; these are compensating controls with workflow and performance trade-offs, not substitutes for the vendor fix.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
GIMP is a cross-platform image editor, and its JP2 loader parses JPEG 2000 image data. The root cause is CWE-122, a heap-based buffer overflow caused by missing validation of a user-supplied length before copying data into a heap buffer; a crafted JP2 file can trigger an out-of-bounds write that corrupts heap memory and may allow execution flow to be hijacked. The affected CPE is cpe:2.3:a:gimp:gimp:3.0.6:*:*:*:*:*:*:*. The CVSS 3.0 vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H describes a local, file-based attack of low complexity with no privileges required, but mandatory user interaction. The flaw was reported through Trend Micro ZDI as ZDI-CAN-28248 and published as ZDI-25-1139.
Know when Gimp gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-parsing flaw needing the victim to open a malicious JP2 locally gives AV:L and UI:R; no privileges needed (PR:N) and heap RCE yields full C/I/A impact.
Primary rating from Vendor (trendmicro).
CVSS VectorVendor: trendmicro
DescriptionCVE.org
GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28248.
Executive ViewAI
GIMP 3.0.6, a widely used image editing application, contains a high-severity flaw that could allow code execution on a workstation if a user opens a specially crafted JPEG 2000 image. The risk is concentrated among employees who routinely open image files from external sources, such as design, marketing, and content teams; while exploitation requires user action and no public exploit identified at time of analysis, a successful attack could compromise the user's endpoint and data. Leadership should prioritize patching because the vendor has made a fix available and the affected software may be present across creative and business workflows.
Apply vendor patch.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
A heap overflow occurs when a program writes data beyond the bounds of a buffer allocated in the heap memory region.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and p
Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attack
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c. Rated high sev
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via
GIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Rated medium severity (CVSS 5.5), this vulnerability is no a
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that alre
Critical remote code execution vulnerability in GIMP's ICO file parser caused by an integer overflow (CWE-190) that lack
Remote code execution in GIMP 3.0.6 allows attackers to run arbitrary code by tricking a user into opening a malicious P
Remote code execution in GIMP 3.2.0-rc1 lets attackers run arbitrary code by tricking a user into opening a malicious IC
Use-after-free vulnerability in the xcf_load_image function in app/xcf/xcf-load.c in GIMP allows remote attackers to cau
Heap-based buffer overflow in GIMP's TIF file parser enables remote code execution when a user opens a crafted TIFF imag
GitHub PoC
Exploit-DB