Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=1
purl pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.5
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-6j1w-qaak-rydj
Aliases:
CVE-2025-10924
gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability There are no reported fixed by versions.
VCID-gdxp-wy9y-m3h1
Aliases:
CVE-2025-10922
gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability There are no reported fixed by versions.
VCID-j13x-yf4j-bygr
Aliases:
CVE-2025-10923
gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability There are no reported fixed by versions.
VCID-qk2t-bm6s-1fes
Aliases:
CVE-2025-10920
gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability There are no reported fixed by versions.
VCID-rw3k-nfe2-4qd2
Aliases:
CVE-2025-10925
gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability There are no reported fixed by versions.
VCID-x4pk-uzwb-97hj
Aliases:
CVE-2025-10921
gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability There are no reported fixed by versions.
VCID-z2up-g7ms-gfg2
Aliases:
CVE-2025-10934
A vulnerability has been discovered in GIMP, which can lead to execution of arbitrary code. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:35:33.937804+00:00 RedHat Importer Affected by VCID-qk2t-bm6s-1fes https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10920.json 38.0.0
2026-04-01T13:35:33.908706+00:00 RedHat Importer Affected by VCID-x4pk-uzwb-97hj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10921.json 38.0.0
2026-04-01T13:35:33.854502+00:00 RedHat Importer Affected by VCID-gdxp-wy9y-m3h1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10922.json 38.0.0
2026-04-01T13:35:33.703360+00:00 RedHat Importer Affected by VCID-j13x-yf4j-bygr https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10923.json 38.0.0
2026-04-01T13:35:33.671839+00:00 RedHat Importer Affected by VCID-6j1w-qaak-rydj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10924.json 38.0.0
2026-04-01T13:35:33.642774+00:00 RedHat Importer Affected by VCID-rw3k-nfe2-4qd2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10925.json 38.0.0
2026-04-01T13:35:33.587650+00:00 RedHat Importer Affected by VCID-z2up-g7ms-gfg2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-10934.json 38.0.0