Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-x4pk-uzwb-97hj
Summarygimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Aliases
0
alias CVE-2025-10921
Fixed_packages
0
url pkg:deb/debian/gegl@1:0.4.26-2?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.26-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.26-2%3Fdistro=trixie
1
url pkg:deb/debian/gegl@1:0.4.26-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.26-2%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.26-2%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/gegl@1:0.4.42-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.42-2%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.42-2%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/gegl@1:0.4.42-2%2Bdeb12u1
purl pkg:deb/debian/gegl@1:0.4.42-2%2Bdeb12u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.42-2%252Bdeb12u1
4
url pkg:deb/debian/gegl@1:0.4.62-2%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.62-2%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.62-2%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/gegl@1:0.4.62-2%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.62-2%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.62-2%252Bdeb13u2%3Fdistro=trixie
6
url pkg:deb/debian/gegl@1:0.4.62-3.1?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.62-3.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.62-3.1%3Fdistro=trixie
7
url pkg:deb/debian/gegl@1:0.4.68-1?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.68-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.68-1%3Fdistro=trixie
8
url pkg:deb/debian/gegl@1:0.4.70-1?distro=trixie
purl pkg:deb/debian/gegl@1:0.4.70-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.70-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/gegl@0.0.18-1
purl pkg:deb/debian/gegl@0.0.18-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-872a-7247-bket
1
vulnerability VCID-8842-1t1c-f3hq
2
vulnerability VCID-8j2r-gy9b-u3dt
3
vulnerability VCID-frcx-4mpe-jkhd
4
vulnerability VCID-j2f2-he72-93hm
5
vulnerability VCID-x4pk-uzwb-97hj
6
vulnerability VCID-z8w1-pdg8-5fgh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@0.0.18-1
1
url pkg:deb/debian/gegl@0.0.22-2
purl pkg:deb/debian/gegl@0.0.22-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-872a-7247-bket
1
vulnerability VCID-8842-1t1c-f3hq
2
vulnerability VCID-8j2r-gy9b-u3dt
3
vulnerability VCID-frcx-4mpe-jkhd
4
vulnerability VCID-j2f2-he72-93hm
5
vulnerability VCID-x4pk-uzwb-97hj
6
vulnerability VCID-z8w1-pdg8-5fgh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@0.0.22-2
2
url pkg:deb/debian/gegl@0.2.0-2%2Bnmu1
purl pkg:deb/debian/gegl@0.2.0-2%2Bnmu1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8842-1t1c-f3hq
1
vulnerability VCID-8j2r-gy9b-u3dt
2
vulnerability VCID-frcx-4mpe-jkhd
3
vulnerability VCID-j2f2-he72-93hm
4
vulnerability VCID-x4pk-uzwb-97hj
5
vulnerability VCID-z8w1-pdg8-5fgh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@0.2.0-2%252Bnmu1
3
url pkg:deb/debian/gegl@0.2.0-7
purl pkg:deb/debian/gegl@0.2.0-7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8842-1t1c-f3hq
1
vulnerability VCID-8j2r-gy9b-u3dt
2
vulnerability VCID-frcx-4mpe-jkhd
3
vulnerability VCID-j2f2-he72-93hm
4
vulnerability VCID-x4pk-uzwb-97hj
5
vulnerability VCID-z8w1-pdg8-5fgh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@0.2.0-7
4
url pkg:deb/debian/gegl@0.3.8-4
purl pkg:deb/debian/gegl@0.3.8-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8842-1t1c-f3hq
1
vulnerability VCID-8j2r-gy9b-u3dt
2
vulnerability VCID-frcx-4mpe-jkhd
3
vulnerability VCID-j2f2-he72-93hm
4
vulnerability VCID-x4pk-uzwb-97hj
5
vulnerability VCID-z8w1-pdg8-5fgh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@0.3.8-4
5
url pkg:deb/debian/gegl@0.4.12-2
purl pkg:deb/debian/gegl@0.4.12-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8j2r-gy9b-u3dt
1
vulnerability VCID-frcx-4mpe-jkhd
2
vulnerability VCID-j2f2-he72-93hm
3
vulnerability VCID-x4pk-uzwb-97hj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@0.4.12-2
6
url pkg:deb/debian/gegl@1:0.4.26-2
purl pkg:deb/debian/gegl@1:0.4.26-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8j2r-gy9b-u3dt
1
vulnerability VCID-frcx-4mpe-jkhd
2
vulnerability VCID-j2f2-he72-93hm
3
vulnerability VCID-x4pk-uzwb-97hj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/gegl@1:0.4.26-2
7
url pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=1
purl pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6j1w-qaak-rydj
1
vulnerability VCID-gdxp-wy9y-m3h1
2
vulnerability VCID-j13x-yf4j-bygr
3
vulnerability VCID-qk2t-bm6s-1fes
4
vulnerability VCID-rw3k-nfe2-4qd2
5
vulnerability VCID-x4pk-uzwb-97hj
6
vulnerability VCID-z2up-g7ms-gfg2
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7%3Farch=1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10921.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10921.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-10921
reference_id
reference_type
scores
0
value 0.00058
scoring_system epss
scoring_elements 0.18241
published_at 2026-04-02T12:55:00Z
1
value 0.00058
scoring_system epss
scoring_elements 0.17996
published_at 2026-04-07T12:55:00Z
2
value 0.00058
scoring_system epss
scoring_elements 0.18293
published_at 2026-04-04T12:55:00Z
3
value 0.00068
scoring_system epss
scoring_elements 0.21081
published_at 2026-04-16T12:55:00Z
4
value 0.00068
scoring_system epss
scoring_elements 0.21142
published_at 2026-04-12T12:55:00Z
5
value 0.00068
scoring_system epss
scoring_elements 0.2109
published_at 2026-04-13T12:55:00Z
6
value 0.00068
scoring_system epss
scoring_elements 0.21091
published_at 2026-04-18T12:55:00Z
7
value 0.00068
scoring_system epss
scoring_elements 0.2107
published_at 2026-04-21T12:55:00Z
8
value 0.00068
scoring_system epss
scoring_elements 0.21113
published_at 2026-04-08T12:55:00Z
9
value 0.00068
scoring_system epss
scoring_elements 0.21174
published_at 2026-04-09T12:55:00Z
10
value 0.00068
scoring_system epss
scoring_elements 0.21184
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-10921
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10921
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10921
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f
reference_id 0e68b7471dabf2800d780819c19bd5e6462f565f
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-10-30T03:56:08Z/
url https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116470
reference_id 1116470
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116470
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2407194
reference_id 2407194
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2407194
7
reference_url https://access.redhat.com/errata/RHSA-2025:21968
reference_id RHSA-2025:21968
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:21968
8
reference_url https://access.redhat.com/errata/RHSA-2025:22417
reference_id RHSA-2025:22417
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:22417
9
reference_url https://www.zerodayinitiative.com/advisories/ZDI-25-910/
reference_id ZDI-25-910
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-10-30T03:56:08Z/
url https://www.zerodayinitiative.com/advisories/ZDI-25-910/
Weaknesses
0
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Exploits
Severity_range_score7.8 - 7.8
Exploitability0.5
Weighted_severity7.0
Risk_score3.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-x4pk-uzwb-97hj