Heap-based Buffer Overflow in GIMP Affects Remote Code Execution

CVE-2025-10921

What is CVE-2025-10921?

A vulnerability in GIMP allows remote attackers to exploit a heap-based buffer overflow during HDR file parsing. This issue arises due to inadequate validation of user-supplied data before it's copied to a buffer, enabling execution of arbitrary code on affected installations. User interaction is essential, as the target must either open a malicious HDR file or visit a compromised webpage to trigger the exploit.

References