CVE-2025-15059

A flaw was found in GIMP. Opening a specially crafted PSP file with GIMP can cause a heap-based buffer overflow due to improper input validation of the length of user-supplied data. An attacker can exploit this vulnerability by convincing a user to open a specially crafted PSP file, resulting in a denial of service or potentially code execution in the context of the current process.

To exploit this issue, an attacker needs to convince a user to process a specially crafted PSP file with GIMP, reducing the likelihood of exploitation. Due to this reason, this flaw has been rated with an important severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, do not open PSP files from untrusted sources with GIMP.