CVEvulnerability
CVE-2025-48798
7.3 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-05-27
- Last modified
- 2026-06-30
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://access.redhat.com/errata/RHSA-2025:9162 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9165 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9308 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9309 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9310 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9314 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9315 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9316 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9501 access.redhat.com
- https://access.redhat.com/errata/RHSA-2025:9569 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2025-48798 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2368557 bugzilla.redhat.com
- https://gitlab.gnome.org/GNOME/gimp/-/issues/11822 gitlab.gnome.org
- https://lists.debian.org/debian-lts-announce/2025/10/msg00022.html lists.debian.org