PT-2025-23001 · Gimp+9 · Gimp+9
Published
2025-01-01
·
Updated
2026-03-04
·
CVE-2025-48798
CVSS v3.1
7.3
High
| Vector | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GIMP versions prior to the fixed version
Description
A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.
Recommendations
For GIMP, update to a version that includes the fix for the use-after-free issue in the XCF parser.
As a temporary workaround, consider avoiding the use of XCF image files until a patch is available.
Restrict access to specially crafted XCF image files to minimize the risk of exploitation.
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Gimp
Linuxmint
Red Hat
Red Os
Rocky Linux
Ubuntu