Логотип exploitDog
bind:CVE-2025-14423
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-14423

Количество 7

Количество 7

ubuntu логотип

CVE-2025-14423

около 2 месяцев назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2025-14423

около 2 месяцев назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2025-14423

около 2 месяцев назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Executio ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-m8h4-qf58-c2ch

около 2 месяцев назад

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20100-1

19 дней назад

Security update for gimp

EPSS: Низкий
rocky логотип

RLSA-2026:0914

18 дней назад

Important: gimp security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-0914

19 дней назад

ELSA-2026-0914: gimp security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
nvd логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
debian логотип
CVE-2025-14423

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Executio ...

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-m8h4-qf58-c2ch

GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of LBM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28311.

CVSS3: 7.8
0%
Низкий
около 2 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20100-1

Security update for gimp

19 дней назад
rocky логотип
RLSA-2026:0914

Important: gimp security update

18 дней назад
oracle-oval логотип
ELSA-2026-0914

ELSA-2026-0914: gimp security update (IMPORTANT)

19 дней назад

Уязвимостей на страницу