CVE-2025-10923

A remote code execution vulnerability exists in GIMP due to improper validation of user-supplied data during the parsing of WBMP (Wireless Bitmap) files. The flaw occurs because an integer overflow can happen before memory allocation, leading to a heap-based buffer overflow. An attacker can exploit this by convincing a user to open a crafted WBMP image file or visit a malicious page, allowing arbitrary code execution within the context of the application process.

While this flaw can lead to arbitrary code execution, it is categorized as Important rather than Critical due to its attack prerequisites. Exploitation requires user interaction — the victim must manually open a malicious WBMP image file in GIMP. Additionally, the vulnerability has a local attack vector (AV:L) and cannot be exploited remotely over a network without user participation. These constraints limit the automatic propagation or large-scale exploitation potential typically seen in critical vulnerabilities, even though the impact on confidentiality, integrity, and availability is high once triggered.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability.