ZDI-CAN-27792
HIGH 7.8
Overdue
Sep 02, 2025
GIMP
GIMP is a widely-used open-source image editing application that has a high-severity vulnerability (CVSS 7.8) requiring local access with user interaction but no authentication to exploit. The flaw could allow an attacker to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for GIMP updates after the December 31, 2025 vendor deadline and consider restricting GIMP usage in high-security environments until patches are available.
Advisory Details
Researcher
Discovered by:
MICHAEL RANDRIANANTENAINA [https://elkamika.blogspot.com/]
Reported
September 02, 2025
Deadline
December 31, 2025
106d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H