Remote Code Execution Vulnerability in GIMP by GNOME

CVE-2025-14422

What is CVE-2025-14422?

A significant vulnerability exists in GIMP's handling of PNM files, allowing remote attackers to execute arbitrary code. The flaw arises from inadequate validation of user-supplied data, leading to an integer overflow during buffer allocation. To exploit this vulnerability, an attacker must entice a user to visit a malicious webpage or open a crafted PNM file, triggering the vulnerability. This issue emphasizes the importance of secure coding practices and timely updates to safeguard against potential exploits.

References