High severity · published May 27, 2025
CVE-2025-48798
Gimp: multiple use after free in xcf parser
7.3
CVSS
0.2%
EPSS
No
On KEV
Description
A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Enterprise Linux 6 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.2 Advanced Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.6 Telecommunications Update Service · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Red Hat
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-48798
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-48798
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:9162
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:9165
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:9308
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:9309
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:9310
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:9314
More from Red Hat Enterprise Linux 6
8.8
CVE-2025-31277
Apple Multiple Products Buffer Overflow Vulnerability
7.5
CVE-2026-34486
Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
10.0
CVE-2026-4692
Sandbox escape in the Responsive Design Mode component
10.0
CVE-2026-4689
Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
10.0
CVE-2026-4688
Sandbox escape due to use-after-free in the Disability Access APIs component