High RHSA-2025:9501 3 CVEs

Red Hat Security Advisory: gimp security update

Published Jun 25, 2025 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 5

Release	Package	Fixed in
Red Hat · RHEL 7 ELS rhel_els:7	gimp	2:2.8.22-1.el7_9.2
Red Hat · RHEL 7 ELS rhel_els:7	gimp-debuginfo	2:2.8.22-1.el7_9.2
Red Hat · RHEL 7 ELS rhel_els:7	gimp-devel	2:2.8.22-1.el7_9.2
Red Hat · RHEL 7 ELS rhel_els:7	gimp-devel-tools	2:2.8.22-1.el7_9.2
Red Hat · RHEL 7 ELS rhel_els:7	gimp-libs	2:2.8.22-1.el7_9.2

Vulnerabilities 3

High 7.8

CVE-2025-5473 EPSS 25%

GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP ICO File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target m…

GIMP GIMP gimp gimp Debian Ubuntu

Jun 6, 2025
High 7.3

CVE-2025-48797

Gimp: multiple heap buffer overflows in tga parser

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu

May 27, 2025
High 7.3

CVE-2025-48798

Gimp: multiple use after free in xcf parser

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu

May 27, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2368557
report
https://bugzilla.redhat.com/show_bug.cgi?id=2368558
report
https://bugzilla.redhat.com/show_bug.cgi?id=2370867
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9501.json
report
https://access.redhat.com/security/cve/CVE-2025-5473
advisory
https://www.cve.org/CVERecord?id=CVE-2025-5473
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-5473
article
https://www.gimp.org/news/2025/05/18/gimp-3-0-4-released/#general-bugfixes
article
https://www.zerodayinitiative.com/advisories/ZDI-25-321/
report
https://access.redhat.com/security/cve/CVE-2025-48797
advisory
https://www.cve.org/CVERecord?id=CVE-2025-48797
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-48797
article
https://gitlab.gnome.org/GNOME/gimp/-/issues/11822
report
https://access.redhat.com/security/cve/CVE-2025-48798
advisory
https://www.cve.org/CVERecord?id=CVE-2025-48798
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-48798