Stack-based Buffer Overflow in GIMP Due to LBM File Parsing Issue

CVE-2025-14423

What is CVE-2025-14423?

A stack-based buffer overflow vulnerability exists within GIMP’s parsing of LBM files, allowing remote attackers to execute arbitrary code on affected systems. This exploit requires user interaction; the victim must either visit a malicious webpage or open a harmful LBM file. The flaw arises from inadequate validation of user-supplied data length before it is copied to a stack-based buffer, enabling potential execution of code within the context of the current process. For more details, see the advisory from the Zero Day Initiative and the vendor’s patch release.

References