CVE-2025-15059 GIMP CVE debrief

Who should care

This vulnerability affects users of GIMP, particularly those who work with PSP files or receive files from untrusted sources. Organizations that use GIMP in their workflow or provide GIMP-based services should prioritize patching this vulnerability to prevent potential attacks. Additionally, individuals who open files from untrusted sources or visit suspicious websites should be cautious, as they may be targeted by attackers exploiting this vulnerability.

Technical summary

The vulnerability exists in the PSP file parsing functionality of GIMP. When a user opens a malicious PSP file, the software fails to properly validate the length of user-supplied data, leading to a heap-based buffer overflow. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. The CVSS vector for this vulnerability is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a high level of severity.

Defensive priority

High priority should be given to patching this vulnerability, as it allows remote code execution and has a high CVSS score. Organizations should prioritize patching GIMP installations and ensure that users are aware of the risks associated with opening files from untrusted sources.

Recommended defensive actions

• Apply the official patch provided by GIMP to fix the vulnerability.
• Ensure that GIMP is updated to the latest version.
• Be cautious when opening files from untrusted sources, especially PSP files.
• Implement additional security measures, such as monitoring and intrusion detection, to detect potential attacks.
• Educate users on the risks associated with opening files from untrusted sources and visiting suspicious websites.

Evidence notes

The CVE-2025-15059 vulnerability was publicly disclosed on January 23, 2026, and has since been modified on June 30, 2026. The vulnerability has a CVSS score of 7.8 and is considered high-severity. The vulnerability is caused by a heap-based buffer overflow in the PSP file parsing functionality of GIMP. User interaction is required to exploit this vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.