CVE-2025-48796

Gimp: stack-based buffer overflows in file-ico

State: Published
Severity: 7.3 High
Published: May 27, 2025
Updated: Jul 27, 2026
Reserved: May 26, 2025

Description

A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more information than the capacity allows. This flaw allows a malicious ANI file to trigger arbitrary code execution.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	redhat

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
gimp	before 2.99.16Affected
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat Enterprise Linux 9Red Hat

References

https://access.redhat.com/security/cve/CVE-2025-48796vdb-entry
RHBZ#2368559issue-tracking
https://gitlab.gnome.org/GNOME/gimp/-/issues/9257

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.