CVE-2025-48798

—

CVSS 3.1

7.3 high

EPSS

<1%p14

Published

May 27, 2025 (May 27, 2025)

Modified

Jun 30, 2026

Description

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

Weakness: CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.