RHSA-2026:0914HighCVSS 7.8
Red Hat Security Advisory: gimp security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2025-14422 — gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow CVE-2025-14423 — gimp: GIMP: Remote Code Execution via stack-based buffer overflow in LBM file parsing CVE-2025-14424 — gimp: GIMP: Remote Code Execution via XCF File Parsing Use-After-Free CVE-2025-14425 — gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:0914
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2424766
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2424767
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2424774
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2424782
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0914.json