What’s Vulnerable › Vulnerabilities
CVE-2025-48797: Gimp: multiple heap buffer overflows in tga parser
- Severity: high (CVSS 7.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-05-27 · updated 2026-06-30
- Weakness: CWE-122
Description
A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow.
Affected products
- Red Hat Enterprise Linux 7 Extended Lifecycle Support: all versions — fixed in 2:2.8.22-1.el7_9.2
- Red Hat Enterprise Linux 8: all versions — fixed in 8100020250614205641.4c9c024f
- Red Hat Enterprise Linux 8.2 Advanced Update Support: all versions — fixed in 8020020250618101631.c3a0935b
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: all versions — fixed in 8040020250618100956.70584597
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: all versions — fixed in 8060020250618100419.6af1eaf0
- Red Hat Enterprise Linux 8.6 Telecommunications Update Service: all versions — fixed in 8060020250618100419.6af1eaf0
- Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions: all versions — fixed in 8060020250618100419.6af1eaf0
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service: all versions — fixed in 8080020250623120629.0621e4ee
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: all versions — fixed in 8080020250623120629.0621e4ee
- Red Hat Enterprise Linux 9: all versions — fixed in 2:2.99.8-4.el9_6.2
- Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions: all versions — fixed in 2:2.99.8-3.el9_0.1
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 2:2.99.8-4.el9_2.1
- Red Hat Enterprise Linux 9.4 Extended Update Support: all versions — fixed in 2:2.99.8-4.el9_4.1
How to fix
Upgrade to a fixed version: Red Hat Enterprise Linux 7 Extended Lifecycle Support 2:2.8.22-1.el7_9.2; Red Hat Enterprise Linux 8 8100020250614205641.4c9c024f; Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020250618101631.c3a0935b; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020250618100956.70584597; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020250618100419.6af1eaf0; Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020250618100419.6af1eaf0; Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020250618100419.6af1eaf0; Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020250623120629.0621e4ee; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020250623120629.0621e4ee; Red Hat Enterprise Linux 9 2:2.99.8-4.el9_6.2; Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions 2:2.99.8-3.el9_0.1; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 2:2.99.8-4.el9_2.1. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2025:9162
- https://access.redhat.com/errata/RHSA-2025:9165
- https://access.redhat.com/errata/RHSA-2025:9308
- https://access.redhat.com/errata/RHSA-2025:9309
- https://access.redhat.com/errata/RHSA-2025:9310
- https://access.redhat.com/errata/RHSA-2025:9314
- https://access.redhat.com/errata/RHSA-2025:9315
- https://access.redhat.com/errata/RHSA-2025:9316
- https://access.redhat.com/errata/RHSA-2025:9501
- https://access.redhat.com/errata/RHSA-2025:9569
- https://access.redhat.com/security/cve/CVE-2025-48797
- https://bugzilla.redhat.com/show_bug.cgi?id=2368558
Get alerted when CVE-2025-48797 or the next vulnerability affects your stack