Stack-based Buffer Overflow in GIMP ILBM File Parsing
CVE-2025-10925

7.8HIGH

Key Information:

Vendor

Gimp

Status
Gimp
Vendor
CVE Published:
29 October 2025

What is CVE-2025-10925?

A stack-based buffer overflow vulnerability exists in GIMP's ILBM file parsing, allowing remote attackers to execute arbitrary code. This flaw is due to inadequate validation of user-supplied data length before copying it into a stack-based buffer. Exploitation requires user interaction, as victims must visit malicious pages or open compromised files. It poses significant risks to users who do not update to safer software versions.

Affected Version(s)

GIMP 3.0.4

References

https://www.zerodayinitiative.com/advisories/ZDI-25-914/
x_research-advisory
https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2450
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-10925 : Stack-based Buffer Overflow in GIMP ILBM File Parsing