ZDI-CAN-27792 HIGH 7.8 Overdue Sep 02, 2025

GIMP

GIMP is a widely-used open-source image editing application that has a high-severity vulnerability (CVSS 7.8) requiring local access with user interaction but no authentication to exploit. The flaw could allow an attacker to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for GIMP updates after the December 31, 2025 vendor deadline and consider restricting GIMP usage in high-security environments until patches are available.

Advisory Details
Researcher Discovered by: MICHAEL RANDRIANANTENAINA [https://elkamika.blogspot.com/]
Reported September 02, 2025
Deadline December 31, 2025 106d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy