A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height, and bytes-per-pixel (img_bpp), which can result in allocating insufficient memory and subsequently performing out-of-bounds writes. This issue could lead to heap corruption, a potential denial of service (DoS), or arbitrary code execution in certain scenarios.
CVE-2025-6035
CVSS base score
6.1 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-190
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
Affected products
gimp gimp
References
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking, Third Party Advisory
- gitlab.gnome.org
- lists.debian.org