Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10871 State: PUBLISHED Published: 2025-09-26T09:04:21.687Z Last Updated: 2025-09-27T03:55:26.125Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-862 Description: An issue has been discovered in GitLab EE affecting all versions from 16.6 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Project Maintainers can exploit a vulnerability where they can assign custom roles to users with permissions exceeding their own, effectively granting themselves elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/569482
CVE ID: CVE-2025-10873 State: PUBLISHED Published: 2025-11-05T06:00:06.600Z Last Updated: 2025-11-05T18:38:43.461Z Vendors: Unknown Products: ElementInvader Addons for Elementor Problem Types: CWE-862 Missing Authorization Description: The ElementInvader Addons for Elementor WordPress plugin before 1.4.1 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses due to missing authorization on the elementinvader_addons_for_elementor_forms_send_form action. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/2eb133db-e1c5-409e-94f8-b71edca5db16/
CVE ID: CVE-2025-10874 State: PUBLISHED Published: 2025-10-24T06:00:09.281Z Last Updated: 2025-10-24T13:32:43.666Z Vendors: Unknown Products: Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a server-side request forgery as the user may force the server to access any URL of their choosing. Additional Analyst Notes: - CISA ADP Vulnrichm
ery as the user may force the server to access any URL of their choosing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/171ba43f-55b6-471d-af0a-be553baf639a/
CVE ID: CVE-2025-10875 State: PUBLISHED Published: 2025-11-04T18:14:28.677Z Last Updated: 2025-11-05T14:33:29.924Z Vendors: Salesforce Products: Mulesoft Anypoint Code Builder Problem Types: CWE-1427 Description: Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code Builder: before 1.11.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.salesforce.com/s/articleView?id=005228032&type=1
CVE ID: CVE-2025-10879 State: PUBLISHED Published: 2025-09-25T16:31:26.280Z Last Updated: 2025-09-25T19:34:14.162Z Vendors: Dingtian Products: DT-R002 Problem Types: CWE-522 Description: All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01
CVE ID: CVE-2025-10880 State: PUBLISHED Published: 2025-09-25T16:32:17.981Z Last Updated: 2025-09-25T18:07:06.076Z Vendors: Dingtian Products: DT-R002 Problem Types: CWE-522 Description: All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to extract the proprietary "Dingtian Binary" protocol password by sending an unauthenticated GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-268-01
CVE ID: CVE-2025-10885 State: PUBLISHED Published: 2025-11-06T17:01:19.327Z Last Updated: 2025-11-08T04:55:19.036Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Installer Problem Types: CWE-250 Description: A maliciously crafted file, when executed on the victim's machine, can lead to privilege escalation to NT AUTHORITY/SYSTEM due to an insufficient validation of loaded binaries. An attacker with local and low-privilege access could exploit this to execute code as SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe - https://www.autodesk.c
: References: - https://emsfs.autodesk.com/utility/odis/1/installer/latest/AdODIS-installer.exe - https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0022
CVE ID: CVE-2025-10890 State: PUBLISHED Published: 2025-09-24T16:17:44.934Z Last Updated: 2025-09-24T17:08:56.292Z Vendors: Google Products: Chrome Problem Types: CWE-1300 Description: Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/430336833
CVE ID: CVE-2025-10891 State: PUBLISHED Published: 2025-09-24T16:17:45.647Z Last Updated: 2025-09-25T03:55:54.392Z Vendors: Google Products: Chrome Problem Types: CWE-472 Description: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/443765373
CVE ID: CVE-2025-10892 State: PUBLISHED Published: 2025-09-24T16:17:46.382Z Last Updated: 2025-09-25T03:55:56.845Z Vendors: Google Products: Chrome Problem Types: CWE-472 Description: Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/444048019
CVE ID: CVE-2025-10894 State: PUBLISHED Published: 2025-09-24T21:20:31.242Z Last Updated: 2025-11-20T07:26:10.947Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Red Hat Products: Multicluster Global Hub, OpenShift Serverless, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Ansible Automation Platform 2 Problem Types: CWE-506 Description: Malicious code was inserted into the Nx (build system) package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo under us
cted versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo under user's accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-10894 - https://access.redhat.com/security/supply-chain-attacks-NPM-packages - https://bugzilla.redhat.com/show_bug.cgi?id=2396282 - https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c - https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware - https://www.wiz.io/blog/s1ngularity-supply-chain-attack
CVE ID: CVE-2025-10895 State: REJECTED Published: N/A Last Updated: 2025-10-02T22:19:25.343Z Description: No description available.
CVE ID: CVE-2025-10896 State: PUBLISHED Published: 2025-11-04T04:27:13.331Z Last Updated: 2025-11-04T20:55:54.279Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: litonice13 Products: Master Blocks – Ultimate Gutenberg Blocks for Marketers, Image Comparison Addon for Elementor, Image Hover Effects for Elementor, Content Locker for Elementor Problem Types: CWE-862 Description: Multiple plugins for WordPress with the Jewel Theme Recommended Plugins Library are vulnerable to Unrestricted Upload of File with Dangerous Type via arbitrary plugin installation in all versions up to, and including, 1.0.2.3. This is due to missing capability checks on the '*_recommended
stallation in all versions up to, and including, 1.0.2.3. This is due to missing capability checks on the '*_recommended_upgrade_plugin' function which allows arbitrary plugin URLs to be installed. This makes it possible for authenticated attackers with subscriber-level access and above to upload arbitrary plugin packages to the affected site's server via a crafted plugin URL, which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0ff3a292-3924-4823-867a-fedb2c1cdd00?source=cve - https://plugins.trac.wordpress.org/browser/image-hover-effects-elementor-addon/tags/1.0.2.3/Libs/Rec
1cdd00?source=cve - https://plugins.trac.wordpress.org/browser/image-hover-effects-elementor-addon/tags/1.0.2.3/Libs/Recommended.php#L334 - https://plugins.trac.wordpress.org/browser/image-hover-effects-elementor-addon/tags/1.0.2.3/Libs/Recommended.php#L43 - https://plugins.trac.wordpress.org/browser/image-hover-effects-elementor-addon/tags/1.0.2.3/Libs/Assets.php#L70 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3384308%40image-hover-effects-elementor-addon&new=3384308%40image-hover-effects-elementor-addon
CVE ID: CVE-2025-10897 State: PUBLISHED Published: 2025-10-31T07:26:39.837Z Last Updated: 2025-10-31T17:18:59.208Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: JMA Plugins Products: WooCommerce Designer Pro Problem Types: CWE-22 Description: The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3a47cde
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3a47cdeb-bd05-4e7e-99dc-dca67064182a?source=cve - https://codecanyon.net/item/woocommerce-designer-pro-cmyk-card-flyer/22027731
CVE ID: CVE-2025-10901 State: PUBLISHED Published: 2025-10-24T08:24:03.403Z Last Updated: 2025-10-24T14:36:54.126Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: originalityai Products: Originality.ai AI Checker Problem Types: CWE-862 Description: The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ai_get_table' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read all data in the wp_originalityai_log database table, which can include post titles, scan scores, credits used,
, to read all data in the wp_originalityai_log database table, which can include post titles, scan scores, credits used, and other data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9bf94803-1ddf-4b9b-9624-497db455aab2?source=cve - https://plugins.trac.wordpress.org/browser/originality-ai/trunk/OriginalityAILogger.php#L202
CVE ID: CVE-2025-10902 State: PUBLISHED Published: 2025-10-24T08:24:02.973Z Last Updated: 2025-10-24T12:30:30.233Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: originalityai Products: Originality.ai AI Checker Problem Types: CWE-285 Description: The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ai_scan_result_remove' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete all data in the wp_originalityai_log database table, which can include post titles, scan scores, cred
d above, to delete all data in the wp_originalityai_log database table, which can include post titles, scan scores, credits used, and other data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/80dd4f6a-20dd-4532-913b-ab08f89db836?source=cve - https://plugins.trac.wordpress.org/browser/originality-ai/trunk/OriginalityAI.php#L532
CVE ID: CVE-2025-10904 State: REJECTED Published: N/A Last Updated: 2025-10-07T22:19:10.831Z Description: No description available.
CVE ID: CVE-2025-10905 State: PUBLISHED Published: 2025-11-11T15:52:21.984Z Last Updated: 2025-11-12T20:02:46.735Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Avast Products: Free Antivirus Problem Types: CWE-693 Description: Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gendigital.com/us/en/contact-us/security-advisories/)
CVE ID: CVE-2025-10906 State: PUBLISHED Published: 2025-09-24T13:02:06.114Z Last Updated: 2025-09-24T18:42:31.453Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: Magnetism Studios Products: Endurance Problem Types: CWE-306, CWE-287 Description: A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS. This affects the function loadModuleNamed:WithReply of the file /Applications/Endurance.app/Contents/Library/LaunchServices/com.MagnetismStudios.endurance.helper of the component NSXPC Interface. Executing manipulation can lead to missing authentication. The attack needs to be launched locally. The exploit has been published and ma
ation can lead to missing authentication. The attack needs to be launched locally. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325691 - https://vuldb.com/?ctiid.325691 - https://vuldb.com/?submit.653994 - https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md - https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md#proof-of-concept
CVE ID: CVE-2025-10907 State: PUBLISHED Published: 2025-11-05T18:03:49.831Z Last Updated: 2025-11-05T18:49:44.604Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WSO2 Products: WSO2 API Manager, WSO2 Open Banking IAM, WSO2 Open Banking AM, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Traffic Manager, WSO2 Micro Integrator, WSO2 Identity Server, WSO2 Identity Server as Key Manager, WSO2 Enterprise Integrator, org.jaggeryjs:org.jaggeryjs.jaggery.app.mgt, org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core, org.wso2.carbon.mediation:org.wso2.carbon.mediation.library, org.wso2.carbon.deployment:org.wso2.carbon.module.mgt, org.wso2.carbon
rbon.mediation:org.wso2.carbon.mediation.library, org.wso2.carbon.deployment:org.wso2.carbon.module.mgt, org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt, org.apache.ws.commons.axiom.wso2:axiom, org.wso2.carbon:org.wso2.carbon.base, org.wso2.carbon:org.wso2.carbon.utils Problem Types: CWE-434 Description: An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the deployment. Successful exploitation may lead to remote code execution (RCE) on the server, dependin
location within the deployment. Successful exploitation may lead to remote code execution (RCE) on the server, depending on how the uploaded file is processed. By default, this vulnerability is only exploitable by users with administrative access to the affected SOAP services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4603/
CVE ID: CVE-2025-10909 State: PUBLISHED Published: 2025-09-24T16:32:06.892Z Last Updated: 2025-10-20T04:39:51.229Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:C) Vendors: Mangati Products: NovoSGA Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the file /admin of the component SVG File Handler. Performing manipulation of the argument logoNavbar/logoLogin results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325696 - https://vuldb.com/?ctiid.325696 - https://vuldb.com/?submit.651379 - https://karinagante.github.io/cve-2025-10909/ - https://karinagante.github.io/cve-2025-10909/#proof-of-concept-poc
CVE ID: CVE-2025-10911 State: PUBLISHED Published: 2025-09-25T15:13:14.210Z Last Updated: 2025-11-20T20:00:59.261Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-825 Description: A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-1091
h. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-10911 - https://bugzilla.redhat.com/show_bug.cgi?id=2397838 - https://gitlab.gnome.org/GNOME/libxslt/-/issues/144 - https://gitlab.gnome.org/GNOME/libxslt/-/merge_requests/77
CVE ID: CVE-2025-10914 State: PUBLISHED Published: 2025-10-23T08:36:08.858Z Last Updated: 2025-10-23T14:56:37.669Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: Proliz Software Ltd. Co. Products: OBS (Student Affairs Information System) Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd. Co. OBS (Student Affairs Information System) allows Reflected XSS.This issue affects OBS (Student Affairs Information System): before V26.0401. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0357
CVE ID: CVE-2025-10916 State: PUBLISHED Published: 2025-10-21T06:00:06.764Z Last Updated: 2025-10-21T14:08:34.703Z Vendors: Unknown Products: FormGent Problem Types: CWE-73 External Control of File Name or Path Description: The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/81c23998-1abb-495f-890a-79624a4cab9a/
CVE ID: CVE-2025-10918 State: PUBLISHED Published: 2025-11-11T15:31:54.062Z Last Updated: 2025-11-12T20:02:59.040Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Ivanti Products: Endpoint Manager Problem Types: CWE-276 Description: Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2025-for-EPM-2024?language=en_US
CVE ID: CVE-2025-10920 State: PUBLISHED Published: 2025-10-29T19:29:35.471Z Last Updated: 2025-10-30T03:56:05.775Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GIMP Products: GIMP Problem Types: CWE-787 Description: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of user-supplied data
flaw exists within the parsing of ICNS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27684. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-909/ - https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443
CVE ID: CVE-2025-10921 State: PUBLISHED Published: 2025-10-29T19:29:39.135Z Last Updated: 2025-11-03T17:31:37.440Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GIMP Products: GIMP Problem Types: CWE-122 Description: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of
cific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27803. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-910/ - https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f
CVE ID: CVE-2025-10922 State: PUBLISHED Published: 2025-10-29T19:29:42.905Z Last Updated: 2025-11-03T17:31:38.433Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: GIMP Products: GIMP Problem Types: CWE-122 Description: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of
cific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-911/ - https://gitlab.gnome.org/GNOME/gimp/-/commit/3d909166463731e94dfe62042d76225ecfc4c1e4