Логотип exploitDog
bind:"GHSA-m8h4-qf58-c2ch" OR bind:"CVE-2025-14423"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-m8h4-qf58-c2ch" OR bind:"CVE-2025-14423"

Количество 9

Количество 9

github логотип

GHSA-m8h4-qf58-c2ch

4 месяца назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2025-14423

4 месяца назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2025-14423

4 месяца назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2025-14423

4 месяца назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2025-14423

4 месяца назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Executio ...

CVSS3: 7.8
EPSS: Низкий
redos логотип

ROS-20260224-73-0007

около 1 месяца назад

Уязвимость gimp

CVSS2: 7.2
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20100-1

3 месяца назад

Security update for gimp

EPSS: Низкий
rocky логотип

RLSA-2026:0914

3 месяца назад

Important: gimp security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-0914

3 месяца назад

ELSA-2026-0914: gimp security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-m8h4-qf58-c2ch

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
4 месяца назад
ubuntu логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
4 месяца назад
redhat логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
4 месяца назад
debian логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Executio ...

CVSS3: 7.8
0%
Низкий
4 месяца назад
redos логотип
ROS-20260224-73-0007

Уязвимость gimp

CVSS2: 7.2
0%
Низкий
около 1 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:20100-1

Security update for gimp

3 месяца назад
rocky логотип
RLSA-2026:0914

Important: gimp security update

3 месяца назад
oracle-oval логотип
ELSA-2026-0914

ELSA-2026-0914: gimp security update (IMPORTANT)

3 месяца назад

Уязвимостей на страницу