Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=2
purl pkg:rpm/redhat/gimp@2:3.0.4-1.el9_7?arch=2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.5
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-hrab-t25s-5ybg
Aliases:
CVE-2025-14425
gimp: GIMP: Remote Code Execution via JP2 file parsing heap-based buffer overflow There are no reported fixed by versions.
VCID-tth9-nncy-5qap
Aliases:
CVE-2025-14422
gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow There are no reported fixed by versions.
VCID-wc8m-8guk-13ez
Aliases:
CVE-2025-14423
gimp: GIMP: Remote Code Execution via stack-based buffer overflow in LBM file parsing There are no reported fixed by versions.
VCID-ynn6-fqzk-qbav
Aliases:
CVE-2025-14424
gimp: GIMP: Remote Code Execution via XCF File Parsing Use-After-Free There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:33:24.075720+00:00 RedHat Importer Affected by VCID-tth9-nncy-5qap https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14422.json 38.0.0
2026-04-01T13:33:23.890540+00:00 RedHat Importer Affected by VCID-wc8m-8guk-13ez https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14423.json 38.0.0
2026-04-01T13:33:23.863207+00:00 RedHat Importer Affected by VCID-ynn6-fqzk-qbav https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14424.json 38.0.0
2026-04-01T13:33:23.834000+00:00 RedHat Importer Affected by VCID-hrab-t25s-5ybg https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-14425.json 38.0.0