CVE-2025-48796 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

Description

A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more information than the capacity allows. This flaw allows a malicious ANI file to trigger arbitrary code execution.

Reserved 2025-05-26 | Published 2025-05-27 | Updated 2025-05-29 | Assigner redhat

HIGH: 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Problem types

Stack-based Buffer Overflow

Product status

Default status

unknown

Default status

unknown

Default status

affected

Default status

affected

Timeline

2025-05-26:	Reported to Red Hat.
2025-05-26:	Made public.

References

access.redhat.com/security/cve/CVE-2025-48796 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2368559 (RHBZ#2368559) issue-tracking

cve.org (CVE-2025-48796)

nvd.nist.gov (CVE-2025-48796)

Download JSON

https://cve.threatint.eu/CVE/CVE-2025-48796

Support options

Helpdesk Chat, Email, Knowledgebase