gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...

CVE-2025-13716

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1032/...

CVE-2025-13711

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1035/ 2026-01-12 18:07:39+00:00| seen| Telegram/Qn4zDx1gopuoFDdeF2t5YNGl6RathPfNxmtfN1VfQWpYEMo...

CVE-2025-23357

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1038/...

CVE-2025-13713

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1027/ 2025-12-23 22:26:18+00:00| seen| https://bsky.app/profile/potato.software/post/3maos665sef23...

CVE-2025-13712

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1028/...

CVE-2025-13706

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1034/...

CVE-2025-13707

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1029/...

CVE-2025-13710

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1030/...

CVE-2025-13708

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1033/...

CVE-2025-13714

creationtimestamp| type| source ---|---|--- 2025-12-01 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1031/...

CVE-2025-13699

creationtimestamp| type| source ---|---|--- 2025-11-27 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1025/ 2025-11-27 22:51:47+00:00| seen| https://gist.github.com/Darkcrai86/9dfce17966ab9913118eb96513ff157a 2026-01-13 15:10:19+00:00| seen|...

CVE-2025-13700

creationtimestamp| type| source ---|---|--- 2025-11-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1024/...

CVE-2025-13703

creationtimestamp| type| source ---|---|--- 2025-11-26 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1023/...

CVE-2025-13698

creationtimestamp| type| source ---|---|--- 2025-11-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1022/...

CVE-2025-6980

creationtimestamp| type| source ---|---|--- 2025-11-25 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1018/ 2025-12-05 03:00:07+00:00| published-proof-of-concept| Telegram/PvVlKU5mouDrQkucYBVA45d4PI3zxJLZNVLfukuzHyAN8nc...

Effective Command-Line Interface Fuzzing with Path-Aware Large Language Model Orchestration

Command-line interface CLI fuzzing tests programs by mutating both command-line options and input file contents, thus enabling discovery of vulnerabilities that only manifest under specific option-input combinations. Prior works of CLI fuzzing face the challenges of generating semantics-rich opti...

gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow in GIMP’s X Window Dump XWD file parser allows an attacker to craft a malicious XWD file or a web page that triggers opening one that can overflow a heap buffer during parsing and lead to remote code execution in the context of the GIMP process. The flaw is tracked as...