Логотип exploitDog
bind:CVE-2025-14422
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-14422

Количество 10

Количество 10

ubuntu логотип

CVE-2025-14422

около 2 месяцев назад

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2025-14422

около 2 месяцев назад

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2025-14422

около 2 месяцев назад

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerabi ...

CVSS3: 7.8
EPSS: Низкий
rocky логотип

RLSA-2026:1574

10 дней назад

Important: gimp:2.8 security update

EPSS: Низкий
github логотип

GHSA-j55m-596h-f8pc

около 2 месяцев назад

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2026-1574

11 дней назад

ELSA-2026-1574: gimp:2.8 security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0313-1

12 дней назад

Security update for gimp

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20100-1

19 дней назад

Security update for gimp

EPSS: Низкий
rocky логотип

RLSA-2026:0914

18 дней назад

Important: gimp security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-0914

19 дней назад

ELSA-2026-0914: gimp security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-14422

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2025-14422

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2025-14422

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerabi ...

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
rocky логотип
RLSA-2026:1574

Important: gimp:2.8 security update

0%
Низкий
10 дней назад
github логотип
GHSA-j55m-596h-f8pc

GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PNM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28273.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
oracle-oval логотип
ELSA-2026-1574

ELSA-2026-1574: gimp:2.8 security update (IMPORTANT)

11 дней назад
suse-cvrf логотип
SUSE-SU-2026:0313-1

Security update for gimp

12 дней назад
suse-cvrf логотип
openSUSE-SU-2026:20100-1

Security update for gimp

19 дней назад
rocky логотип
RLSA-2026:0914

Important: gimp security update

18 дней назад
oracle-oval логотип
ELSA-2026-0914

ELSA-2026-0914: gimp security update (IMPORTANT)

19 дней назад

Уязвимостей на страницу