[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fo0t3CXzrN3F-cyMs0m2g1TCgA9ELpzTZVH1MvBcnklM":3,"g5a-risk:CVE-2025-5473":123},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":27,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":49,"references":50,"referencesCount":65,"weaknesses":66,"weaknessesCount":49,"isActivelyExploited":75,"cisaInfo":27,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":111,"notableEvents":112},"CVE-2025-5473","What is CVE-2025-5473?","GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ICO files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26752.","GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ...","2025-06-06T19:15:27.463","2025-11-03T18:17:01.407",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":40,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":39,"ImpactScore":29},"zdi-disclosures@trendmicro.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":37,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":38,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOCAL",7.8,1.8,[],0.23483,[41,41,41,41,41,41,41],"High",[45],{"vendor":46,"product":46,"version":47,"criteria":48,"vulnerable":4},"gimp","*","cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:*",1,[51,56,61],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fwww.gimp.org\u002Fnews\u002F2025\u002F05\u002F18\u002Fgimp-3-0-4-released\u002F#general-bugfixes","Gimp",[55],"Release Notes",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-321\u002F","Zerodayinitiative",[60],"Third Party Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00022.html","Debian",[],3,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","","Stable","Base","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2025-5473? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-5473, a high severity cyber security vulnerability from 2025. GIMP ICO File Parsing Integer Overflow Remote Code Execution...","CVE-2025-5473, CVE-2025-5473 vulnerability, CVE-2025-5473 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, gimp security, gimp vulnerability","\u002Fwhat-is\u002Fcve-2025-5473",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-5473","Cybersecurity","CVE-2025-5473, CVE-2025-5473 vulnerability, CVE-2025-5473 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":75,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":110,"VersionEndIncluding":27},"867EB2F4-07F5-4768-880E-84F0AF1908C3","3.0.4",[],[113],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"f14839f8-5ea4-4a97-ae32-bde9bc00070f","NEW_NVD","2025-06-09T22:29:00.23876+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":121,"version":122},1792269080216,"2.0",{"score":124,"band":125,"action":126,"scoredAt":127},41,"Medium","Plan remediation","2026-10-16T07:07:34.506847+00:00"]