CVE-2025-6035Medium· 6.1▾ SunlitA flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can re…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
0.5% → 0.6%
A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can result in allocating insufficient memory and subsequently performing out-of-bounds writes. This issue could lead to heap corruption, a potential denial of service (DoS), or arbitrary code execution in certain scenarios.
gimp = 2.8.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-62438Medium· 6.1Gimp: gimp: paa integer overflow out-of-bounds read
CVE-2026-62439High· 7.0Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
CVE-2026-78465High· 7.0A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only
CVE-2026-66758High· 7.8A flaw was found in the file-fits plugin in GIMP
CVE-2026-92248High· 7.8A flaw was found in the file-psd plugin in GIMP
CVE-2026-58384High· 7.3A flaw was found in GIMP's PSD parser