CVE-2025-48797

Description

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow.

Reserved 2025-05-26 | Published 2025-05-27 | Updated 2025-06-26 | Assigner redhat

Problem types

Heap-based Buffer Overflow

Product status

Default status
affected

2:2.8.22-1.el7_9.2 before *
unaffected

Default status
affected

8100020250614205641.4c9c024f before *
unaffected

Default status
affected

8020020250618101631.c3a0935b before *
unaffected

Default status
affected

8040020250618100956.70584597 before *
unaffected

Default status
affected

8060020250618100419.6af1eaf0 before *
unaffected

Default status
affected

8060020250618100419.6af1eaf0 before *
unaffected

Default status
affected

8060020250618100419.6af1eaf0 before *
unaffected

Default status
affected

8080020250623120629.0621e4ee before *
unaffected

Default status
affected

8080020250623120629.0621e4ee before *
unaffected

Default status
affected

2:2.99.8-4.el9_6.2 before *
unaffected

Default status
affected

2:2.99.8-3.el9_0.1 before *
unaffected

Default status
affected

2:2.99.8-4.el9_2.1 before *
unaffected

Default status
affected

2:2.99.8-4.el9_4.1 before *
unaffected

Default status
unknown

Timeline

2025-05-26:	Reported to Red Hat.
2025-05-26:	Made public.

References

access.redhat.com/errata/RHSA-2025:9162 (RHSA-2025:9162) vendor-advisory

access.redhat.com/errata/RHSA-2025:9165 (RHSA-2025:9165) vendor-advisory

access.redhat.com/errata/RHSA-2025:9308 (RHSA-2025:9308) vendor-advisory

access.redhat.com/errata/RHSA-2025:9309 (RHSA-2025:9309) vendor-advisory

access.redhat.com/errata/RHSA-2025:9310 (RHSA-2025:9310) vendor-advisory

access.redhat.com/errata/RHSA-2025:9314 (RHSA-2025:9314) vendor-advisory

access.redhat.com/errata/RHSA-2025:9315 (RHSA-2025:9315) vendor-advisory

access.redhat.com/errata/RHSA-2025:9316 (RHSA-2025:9316) vendor-advisory

access.redhat.com/errata/RHSA-2025:9501 (RHSA-2025:9501) vendor-advisory

access.redhat.com/errata/RHSA-2025:9569 (RHSA-2025:9569) vendor-advisory

access.redhat.com/security/cve/CVE-2025-48797 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2368558 (RHBZ#2368558) issue-tracking

cve.org (CVE-2025-48797)

nvd.nist.gov (CVE-2025-48797)

Download JSON