CVE-2025-6035 Gimp: gimp integer overflow
An integer overflow in GIMP's Despeckle plug-in allows attackers to cause heap corruption, leading to denial of service or arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-6035?
CVE-2025-6035 is a medium-severity vulnerability in Gimp Gimp, published on 13 Jun 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can result in allocating insufficient memory and subsequently performing out-of-bounds writes. This issue could lead to heap corruption, a potential denial of service (DoS), or arbitrary code execution in certain scenarios.
Weakness: CWE-190
Which versions are affected by CVE-2025-6035?
It affects 1 product.
Linux distribution packages (5)
gimp SUSE:Linux Enterprise Module for Package Hub 15 SP6 | All versions | 2.10.30-150400.3.23.1 |
gimp SUSE:Linux Enterprise Module for Package Hub 15 SP7 | All versions | 2.10.30-150400.3.23.1 |
gimp SUSE:Linux Enterprise Workstation Extension 15 SP6 | All versions | 2.10.30-150400.3.23.1 |
gimp SUSE:Linux Enterprise Workstation Extension 15 SP7 | All versions | 2.10.30-150400.3.23.1 |
gimp openSUSE:Leap 15.6 | All versions | 2.10.30-150400.3.23.1 |
Products include Gimp Gimp.
How do I fix CVE-2025-6035?
Apply the vendor's patch.
Is CVE-2025-6035 being exploited?
There is no known exploitation of CVE-2025-6035 in the wild and no public exploit code.
Other vulnerabilities in Gimp Gimp
Sources
Also known as DEBIAN-CVE-2025-6035, GHSA-h5rp-69cv-hv5v, OESA-2025-1832, OESA-2025-1833, OESA-2025-1834, SUSE-SU-2025:02367-1.