Heap-based buffer overflow in Gimp - CVE-2025-10921

Vulnerability identifier: #VU116095

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-10921

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the rgbe_read_new_rle() function in libs/rgbe/rgbe.c when handling HDR files. A remote attacker can trick the victim into opening a specially crafted file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Gimp
Debian Linux
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Workstation Extension 15
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
SUSE Package Hub 15
openSUSE Leap
gegl-devel
gegl-0_3
libgegl-0_3-0-debuginfo
typelib-1_0-Gegl-0_3
gegl-0_3-debuginfo
libgegl-0_3-0
gegl-debugsource
gegl-debuginfo
gegl (Debian package)
libgegl-0_4-0
gegl-doc
gegl-0_4
libgegl-0_4-0-debuginfo
gegl
typelib-1_0-Gegl-0_4
gegl-0_4-debuginfo
gegl-0_4-lang
libgegl-0_4-0-32bit-debuginfo
libgegl-0_4-0-32bit
libgegl-0_4-0-64bit-debuginfo
libgegl-0_4-0-64bit
python2-cairo-devel
python2-cairo
gimp
gimp-devel
gimp-devel-tools
gimp-libs
pygtk2-doc
pygtk2-devel
pygtk2-codegen
pygtk2
pygobject2
pygobject2-doc
pygobject2-devel
pygobject2-codegen
gimp (Red Hat package)

Install updates from vendor's repository.

gegl-devel - addressed in versions 0.2.0-15.9.1, 0.4.46-150600.4.3.1
gegl-0_3 - update to 0.3.34-150000.3.6.1
libgegl-0_3-0-debuginfo - update to 0.3.34-150000.3.6.1
typelib-1_0-Gegl-0_3 - update to 0.3.34-150000.3.6.1
gegl-0_3-debuginfo - update to 0.3.34-150000.3.6.1
libgegl-0_3-0 - update to 0.3.34-150000.3.6.1
gegl-debugsource - addressed in versions 0.3.34-150000.3.6.1, 0.4.46-150600.4.3.1
gegl-debuginfo - addressed in versions 0.3.34-150000.3.6.1, 0.4.46-150600.4.3.1
gegl (Debian package) - addressed in versions 1:0.4.42-2+deb12u1, 1:0.4.62-2+deb13u1
libgegl-0_4-0 - update to 0.4.46-150600.4.3.1
gegl-doc - update to 0.4.46-150600.4.3.1
gegl-0_4 - update to 0.4.46-150600.4.3.1
libgegl-0_4-0-debuginfo - update to 0.4.46-150600.4.3.1
gegl - update to 0.4.46-150600.4.3.1
typelib-1_0-Gegl-0_4 - update to 0.4.46-150600.4.3.1
gegl-0_4-debuginfo - update to 0.4.46-150600.4.3.1
gegl-0_4-lang - update to 0.4.46-150600.4.3.1
libgegl-0_4-0-32bit-debuginfo - update to 0.4.46-150600.4.3.1
libgegl-0_4-0-32bit - update to 0.4.46-150600.4.3.1
libgegl-0_4-0-64bit-debuginfo - update to 0.4.46-150600.4.3.1
libgegl-0_4-0-64bit - update to 0.4.46-150600.4.3.1
python2-cairo-devel - update to 1.16.3-7
python2-cairo - update to 1.16.3-7
gimp - update to 2.8.22-26
gimp-devel - update to 2.8.22-26
gimp-devel-tools - update to 2.8.22-26
gimp-libs - update to 2.8.22-26
pygtk2-doc - update to 2.24.0-25
pygtk2-devel - update to 2.24.0-25
pygtk2-codegen - update to 2.24.0-25
pygtk2 - update to 2.24.0-25
pygobject2 - update to 2.28.7-5
pygobject2-doc - update to 2.28.7-5
pygobject2-devel - update to 2.28.7-5
pygobject2-codegen - update to 2.28.7-5
gimp (Red Hat package) - update to 3.0.4-1.el9_7.1

• https://www.zerodayinitiative.com/advisories/ZDI-25-910/
• https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f
• https://gitlab.gnome.org/GNOME/gegl/-/issues/430

• Multiple vulnerabilities in Gimp
• Debian update for gegl
• Red Hat Enterprise Linux 9 update for gimp
• Red Hat Enterprise Linux 8 update for the gimp:2.8 module
• Anolis OS update for gimp:2.8 module
• SUSE update for gegl
• SUSE update for gegl
• SUSE update for gegl