The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22445 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)

    * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22497 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)

    * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:22866 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)

    * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0027 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)

    * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:21968 advisory.

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)

    * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)

    * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)

    * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10921)

    * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10925)

    * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)

    * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21968 advisory.

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)
      * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)
      * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)
      * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10921)
      * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10925)
      * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)
      * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-22417 advisory.

    - fix CVE-2025-10920
    - fix CVE-2025-10921
    - fix CVE-2025-10922
    - fix CVE-2025-10923
    - fix CVE-2025-10924
    - fix CVE-2025-10925
    - fix CVE-2025-10934
    - fix CVE-2025-5473 (RHEL-95696)
    - fix CVE-2025-48797 (RHEL-93503)
    - fix CVE-2025-48798 (RHEL-93506)
    - fix CVE-2023-44442
    - fix CVE-2023-44444

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0191 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-10920:
    GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
    The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper     validation of user-supplied data, which can result in a write past the end of an allocated buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-     CAN-27684.

    CVE-2025-10921:
    GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file.
    The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803.

    CVE-2025-10922:
    GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file.
    The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.

    CVE-2025-10923:
    GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
    The specific flaw exists within the parsing of WBMP files. The issue results from the lack of proper     validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-     CAN-27878.

    CVE-2025-10924:
    GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows     remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required     to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
    The specific flaw exists within the parsing of FF files. The issue results from the lack of proper     validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An     attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-     CAN-27836.

    CVE-2025-10925:
    GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file.
    The specific flaw exists within the parsing of ILBM files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker     can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27793.

    CVE-2025-10934:
    GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability     allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is     required to exploit this vulnerability in that the target must visit a malicious page or open a malicious     file.
    The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper     validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can     leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27823.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:22417 advisory.

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)
      * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)
      * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)
      * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10921)
      * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10925)
      * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)
      * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20055-1 advisory.

    Changes in gimp:

    Update to 3.0.6:

      - Security:

        - During development, we received reports from the Zero Day           Initiative of potential security issues with some of our file           import plug-ins. While these issues are very unlikely to           occur with real files, developers like Jacob Boerema and Alx           Sa proactively improved security for those imports.
          The resolved reports are:
          - ZDI-CAN-27793
          - ZDI-CAN-27823
          - ZDI-CAN-27836
          - ZDI-CAN-27878
          - ZDI-CAN-27863
          - ZDI-CAN-27684

      - Core:

        - Many false-positive build warnings have been cleaned out (and           proper issues fixed).
        - Various crashes fixed.
        - When creating a layer mask from the layer's alpha, but the           layer has no alpha, simply fill the mask with complete           opacity instead of a completely transparent layer.
        - Various core infrastructure code reviewed, cleaned up,           refactored and improved, in drawable, layer and filter           handling code, tree view code, and more.
        - GIMP_ICONS_LIKE_A_BOSS environment variable is not working           anymore (because gtk-menu-images and gtk-button-images           have been deprecated in GTK3 and removed in GTK4) and was           therefore removed.
        - Lock Content now shows as an undo step.
        - Add alpha channel for certain transforms.
        - Add alpha channel on filter merge, when necessary.
        - Filters can now be applied non-destructively on channels.
        - Improved Photoshop brush support.
        - After deleting a palette entry, the next entry is           automatically selected. This allows easily deleting several           entries in a row, among other usage.
        - Resize image to layers irrespective to selections.
        - Improved in-GUI release notes' demo script language:

          - We can now set a button value to click it: toolbox:text,             tool-options:outline=1, tool-options:outline-direction
          - Color selector's module names can be used as identifiers:
            color-editor,color-editor:CMYK=1,color-editor:total-ink-coverage

        - Fixed Alpha to Selection on single layers with no           transparency.
        - Various code is slowly ported to newer code, preparing for           GTK4 port (in an unplanned future step):

          - Using g_set_str() (optionally redefining it in our core             code to avoid bumping the GLib minimum requirement).
          - Start using GListModel in various pieces of code, in             particular getting rid of more and more usage of             GtkTreeView when possible (as it will be deprecated with             GTK4).
          - New GimpRow class for all future row widgets.
          - Use more of G_DECLARE_DERIVABLE_TYPE and             G_DECLARE_FINAL_TYPE where relevant.
          - New GimpContainerListView using a GtkListBox.
          - New GimpRowSeparator, GimpRowSettings, GimpRowFilter and             GimpRowDrawableFilter widgets.

        - (Experimental) GEX Format was updated.
        - Palette import:

          - Set alpha value for image palette imports.
          - Fix Lab & CMYK ACB palette import.
          - Add palette format filters to import dialog, making it more             apparent what palette formats are supported, and giving the             ability to hide irrelevant files.

        - Improved filter actions' sensitivity to make sure they are           set insensitive when relevant. In particular filters which           cannot be run non-destructively (e.g. filters with aux           inputs, non-interactive filters and GEGL Graph) must be           insensitive when trying to run them on group layers.
        - Fix bad axis centering on zoom out.
        - Export better SVG when exporting paths.

      - Tools:

        - Text tool: make sure the default color is only changed when           the user confirms the color change.
        - Foreground Selection tool: do not create a selection when no           strokes has been made. In particular this removes the           unnecessary delay which happened when switching to another           tool without actually stroking anything.
        - All Transform tools: transform boundaries for preview is now           multi-layers aware.
        - (Experimental) Seamless Clone tool: made to work again,           though it is still too slow to get out of Playground.

      - Graphical User Interface:

        - Various improvements to window management:

          - Keep-Above windows are set with the Utility hint.
          - Utility windows are not made transient to a parent.
          - Transient factory dialogs follow the active display,             ensuring that new image windows would not hide your toolbox             and dock windows.

        - Various CSS improvements for styling of the interface. Some           theme leaks were also fixed.
        - New toggle button in Brushes and Fonts dockable, allowing           brush and font previews to optionally follow the color theme.
          For instance, when using a dark theme, the brush and font           previews could be drawn on the theme background, using the           theme foreground colors. By default, these data previews are           still drawn as black on white.
        - Palette grid is now drawn with the theme's background color.
        - Consistent naming patterns on human-facing options (first           word only capitalized).
        - About dialog:

          - We will now display the date and time of the last check in             a Up to date as of <date> at <time> string, differing             from the Last checked on <date> at <time> string. The             former will be used to indicate that GIMP is indeed             up-to-date whereas the latter when a new version was             released and that you should update.
          - We now respect the system time/date format on macOS and             Windows.

        - The search popup won't pop up without an image.
        - Better zoom step algorithm for data previews in container           popup (e.g. the brush popup in paint Tool Options).
        - Disable animation in the Input Controller, Preferences and           Welcome dialogs for stack transition when animation are           disabled in system settings.
        - Fixed crosshair hotspot on Windows (crosshair cursor for           brushes was offset with a non-100% display scale factor).
        - Debug/CRITICAL dialog:

          - Make sure it is non-modal.
          - Follow the theme mode under Windows.

        - While loading images, all widgets in the file dialog are made           insensitive, except for the Cancel button and the progress           bar.
        - Both grid and list views can now zoom via scroll and zoom           gestures (it used to only work in list views).
        - Pop an error message up on startup when GIO modules to read           HTTPS links are not found and that we therefore fail to load           the remote gimp_versions.json file. With the AppImage package           in particular, we depend on an environment daemon which           cannot be shipped in the package. So the next best thing is           to warn people and tell them what they should install to get           version checks.
        - Welcome dialog:

          - The Community Tutorials link is now shown after the             Documentation link.
          - The Learn more link in Release Notes tab leads to the             actual release news for this version.

      - Plug-ins:

        - PDF export: do not draw disabled layer masks.
        - Jigsaw: the plug-in can now draw on transparent layers.
        - Various file format fixes and improvements: JPEG 2000 import,           TIFF import, DDS import, SVG import, PSP import, FITS export,           ICNS import, Dicom import, WBMP import, Farbfeld import, XWD           import, ILBM import.
        - Sphere Designer: use spin scale instead of spin entries (the           latter is unusable with little horizontal space).
        - Animation Play: frames are shown again in the playback           progress bar.
        - Vala Goat Exercise: ignoring C warning in this Vala plug-in           as it is generated code and we cannot control it.
        - file-gih: brush pipe selection modes now have nice,           translatable names.
        - Metadata viewer: port from GtkTreeView to GtkListBox.
        - File Raw Data: reduce Raw Data load dialogue height by moving           to a 2-column layout.
        - SVG import: it is now possible to break aspect ratio with           specific width/height arguments, when calling the PDB           procedure non-interactively (from other plug-ins).
        - Print: when run through a portal print dialog, the Image           Settings will be exposed as a secondary dialog, outputted           after the portal dialog, instead of a tab on the main print           dialog (because it is not possible to tweak the print dialog           when it is created by a portal). This will bring back usable           workflow of printing with GIMP when run in a sandbox (e.g.
          Flatpak or Snap).
        - Recompose: fixed for YCbCr decomposed images.
        - Fixed vulnerabilities: ZDI-CAN-27684, ZDI-CAN-27863,           ZDI-CAN-27878, ZDI-CAN-27836, ZDI-CAN-27823, ZDI-CAN-27793.
        - C Source and HTML export can now be run non-interactively too           (e.g. from other plug-ins).
        - Map Object: fix missing spin boxes.
        - Small Tiles: fix display lag.

    - CVE-2025-10925: Fix GIMP ILBM file parsing stack-based buffer overflow remote code       execution vulnerability. (ZDI-25-914, ZDI-CAN-27793, bsc#1250501)

    - CVE-2025-10922: Fix GIMP DCM file parsing heap-based buffer overflow remote code       execution vulnerability.  (ZDI-25-911, ZDI-CAN-27863, bsc#1250497)

    - CVE-2025-10920: Prevent overflow attack by checking if output >= max, not just       output > max. (ZDI-25-909, ZDI-CAN-27684, bsc#1250495)

    - CVE-2025-10924: Fix integer overflow while parsing FF files. (bsc#1250499)

    - CVE-2025-2760: A vulnerability allows remote attackers to execute arbitrary       code on affected installations of GIMP. The specific flaw exists       within parsing of XWD files. An integer overflow happens before       allocating a buffer. This fixed in GIMP 3.0.0.
      https://www.gimp.org/news/2025/03/16/gimp-3-0-released       (bsc#1241690)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11543:04 advisory.

    * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10922)
      * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)
      * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)
      * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10921)
      * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10925)
      * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)
      * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability     (CVE-2025-10934)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
276995	RHEL 9 : gimp (RHSA-2025:22445)	Nessus	Red Hat Local Security Checks	12/2/2025	12/2/2025	high
277047	RHEL 9 : gimp (RHSA-2025:22497)	Nessus	Red Hat Local Security Checks	12/2/2025	12/2/2025	high
277926	RHEL 7 : gimp (RHSA-2025:22866)	Nessus	Red Hat Local Security Checks	12/9/2025	12/9/2025	high
281660	RHEL 8 : gimp:2.8 (RHSA-2026:0027)	Nessus	Red Hat Local Security Checks	1/5/2026	1/5/2026	high
276738	RockyLinux 9 : gimp (RLSA-2025:21968)	Nessus	Rocky Linux Local Security Checks	11/25/2025	11/25/2025	high
277305	AlmaLinux 9 : gimp (ALSA-2025:21968)	Nessus	Alma Linux Local Security Checks	12/3/2025	12/3/2025	high
277378	Oracle Linux 8 : gimp:2.8 (ELSA-2025-22417)	Nessus	Oracle Linux Local Security Checks	12/4/2025	1/21/2026	high
277562	Alibaba Cloud Linux 3 : 0191: gimp:2.8 (ALINUX3-SA-2025:0191)	Nessus	Alibaba Cloud Linux Local Security Checks	12/5/2025	12/5/2025	high
277565	AlmaLinux 8 : gimp:2.8 (ALSA-2025:22417)	Nessus	Alma Linux Local Security Checks	12/5/2025	12/5/2025	high
291313	openSUSE 16 Security Update : gimp (openSUSE-SU-2026:20055-1)	Nessus	SuSE Local Security Checks	1/18/2026	1/18/2026	high
291786	MiracleLinux 9 : gimp-3.0.4-1.el9_7.1 (AXSA:2025-11543:04)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high