GIMP XCF File Parsing Use-After-Free Vulnerability in GIMP Software

CVE-2025-14424

What is CVE-2025-14424?

A use-after-free vulnerability exists in the GIMP image editor stemming from inadequate validation while parsing XCF files. This flaw enables malicious actors to execute arbitrary code remotely by enticing users to open a specially crafted XCF file or visit a malicious webpage. This vulnerability exploits the absence of proper object validation prior to operations, allowing attackers to execute code with the current process's privileges. Users are advised to stay updated with patches to mitigate potential risks.

References