CVE-2025-14424

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the parsing of XCF files within GIMP, leading to a use-after-free condition. This allows remote attackers to potentially execute arbitrary code on affected systems. User interaction is required, specifically the need for a target to open a malicious file or visit a malicious page. The issue stems from a lack of validation to confirm the existence of an object before operations are performed on it, which an attacker can exploit to execute code within the current process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.