Heap-based Buffer Overflow in GIMP Allows Remote Code Execution

CVE-2025-14425

What is CVE-2025-14425?

A vulnerability in GIMP resides in its JP2 file parsing feature, where improper validation of user-supplied data can lead to a heap-based buffer overflow. This flaw enables remote attackers to execute arbitrary code on affected installations, provided the user interacts with a malicious web page or opens a harmful file. The exploit takes advantage of the vulnerability's impact on memory management, allowing unauthorized code execution within the current process.

References