# CVE-2025-15059: GIMP heap buffer overflow in PSP file parsing

Source: https://junglewise.ai/threats/cve-2025-15059-gimp-heap-buffer-overflow-in-psp-file-parsing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-23. Updated: 2026-06-30  
License: CC BY 4.0 with a link back

CVE-2025-15059 · Severity: high · CVSS 7.8 · Published 2026-01-23

GIMP, a popular open-source image editor, is vulnerable to a security flaw when processing PaintShop Pro (PSP) files. An attacker can create a malicious image file that, when opened by a user, allows the attacker to take control of the computer or run unauthorized software. This could lead to the theft of personal data or a complete system compromise if a user is tricked into opening a specially crafted file.

Technologies: [Gimp](https://junglewise.ai/threats/technologies/gimp). Vendors: [Gimp](https://junglewise.ai/threats/vendors/gimp).

## Quick answers

**Is CVE-2025-15059 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-15059 being exploited in the wild.

**How severe is CVE-2025-15059?** High severity, with a CVSS score of 7.8, published 23 January 2026.

**Which products and versions are affected?** Gimp 3.0.6, 3.0.4, 2.99.8.

**Is there a fix for CVE-2025-15059?** A patch was published on 2025-12-29: GIMP project commit released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-15059 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2025-15059?** Check whether you run Gimp at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A heap-based buffer overflow vulnerability exists in GIMP's handling of PaintShop Pro (PSP) files. The flaw is caused by insufficient validation of user-supplied data lengths before copying them into a heap-based buffer during file parsing. An attacker can exploit this by inducing a user to open a specially crafted PSP file, leading to out-of-bounds memory writes. Successful exploitation allows for arbitrary code execution within the context of the GIMP process. Patches have been released by the GIMP project and downstream maintainers like Red Hat to address the issue by improving input validation.

## Affected products

- GIMP GIMP 3.0.6, 3.0.4, 2.99.8
- Red Hat Enterprise Linux 6, 9, 9.0, 9.2, 9.4, 9.6, 9.8

## Timeline

- 2025-11-11: disclosed: Vulnerability reported to vendor
- 2025-12-29: advisory: Coordinated public release by ZDI
- 2025-12-29: patched: GIMP project commit released
- 2026-01-23: advisory: NVD publication
- 2026-02-16: patched: Red Hat released security updates (RHSA-2026:2707)

## References

- [https://gitlab.gnome.org/GNOME/gimp/-/commit/03575ac8cbb0ef3103b0a15d6598475088dcc15e](https://gitlab.gnome.org/GNOME/gimp/-/commit/03575ac8cbb0ef3103b0a15d6598475088dcc15e)
- [https://www.zerodayinitiative.com/advisories/ZDI-25-1196/](https://www.zerodayinitiative.com/advisories/ZDI-25-1196/)
- [https://access.redhat.com/errata/RHSA-2026:2707](https://access.redhat.com/errata/RHSA-2026:2707)
- [https://access.redhat.com/errata/RHSA-2026:2930](https://access.redhat.com/errata/RHSA-2026:2930)
- [https://access.redhat.com/errata/RHSA-2026:2950](https://access.redhat.com/errata/RHSA-2026:2950)
- [https://access.redhat.com/errata/RHSA-2026:2953](https://access.redhat.com/errata/RHSA-2026:2953)
- [https://access.redhat.com/errata/RHSA-2026:2969](https://access.redhat.com/errata/RHSA-2026:2969)

## Related threats

- [GIMP use-after-free in XCF path loader](https://junglewise.ai/threats/cve-2026-112261-a-flaw-was-found-in-gimp-opening-a-crafted-xcf-that-selects-a)
- [GIMP use-after-free in XCF loader](https://junglewise.ai/threats/cve-2026-112258-a-flaw-was-found-in-gimp-the-xcf-loader-can-leave-a-dangling)
- [GIMP integer overflow in file-pvr plug-in](https://junglewise.ai/threats/cve-2026-62439-a-flaw-was-found-in-gimp-an-integer-overflow-occurs-in-the-file)
- [GIMP heap buffer overflow in raw data export](https://junglewise.ai/threats/cve-2026-106066-a-heap-based-buffer-overflow-was-found-in-gimp-s-raw-data-export)
- [GIMP heap buffer overflow in GIF export](https://junglewise.ai/threats/cve-2026-106064-a-heap-based-buffer-overflow-was-found-in-gimp-s-gif-export-plug)