Heap-based Buffer Overflow Vulnerability in GIMP by GNOME

CVE-2025-15059

What is CVE-2025-15059?

The GIMP application experiences a heap-based buffer overflow vulnerability due to improper validation of the length of user-supplied PSP file data. This flaw allows remote attackers to exploit the vulnerability by convincing users to visit a malicious webpage or open a compromised file. Successful exploitation permits the attacker to execute arbitrary code within the context of the current user process, posing significant risks to the security of affected installations.

References