gimp (SUSE:Linux Enterprise Workstation Extension 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Workstation Extension 15 SP6 package gimp, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (8)

CVE-2025-5473 — CVSS 8.8 (high): GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-10934 — CVSS 7.8 (high): GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
CVE-2025-2760 — CVSS 7.8 (high): GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2025-2761 — CVSS 7.8 (high): GIMP FLI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
CVE-2025-10922 — CVSS 7.8 (high): GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
CVE-2025-48797 — CVSS 7.3 (high): A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted…
CVE-2025-48798 — CVSS 7.3 (high): A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an…
CVE-2025-6035 — CVSS 6.1 (medium): A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs due to unchecked…