CVE-2025-6035 is an integer overflow vulnerability in the GIMP "Despeckle" plug-in, affecting GIMP and Red Hat Enterprise Linux. This flaw stems from unchecked multiplication of image dimensions, leading to insufficient memory allocation and subsequent out-of-bounds writes. With a CVSS score of 7.8 (HIGH), this vulnerability has a low attack complexity and could result in heap corruption, denial of service, or arbitrary code execution. Currently, there is no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.8.0CPE matchmatch criteria | cpe:2.3:a:gimp:gimp:2.8.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.