ZDI-CAN-28416 HIGH 7.8 Overdue Nov 11, 2025

GIMP

GIMP is a widely-used open-source image editing software that allows users to create and modify graphics. This vulnerability has a high severity rating and requires local access with user interaction to exploit, but once successful grants an attacker high-level capabilities to compromise confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches released by March 11, 2026, and prioritize updates for systems where GIMP is actively used, particularly in environments handling sensitive image data or where users may open untrusted files.

Advisory Details
Researcher Discovered by: Anonymous
Reported November 11, 2025
Deadline March 11, 2026 36d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy