CVE-2025-48798CWE-416

Gimp: multiple use after free in xcf parser

High · published May 27, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Weakness
CWE-416 · Use After Free
Published
2025-05-27T14:05Z
EPSS history
Timeline
  • 27 MAY 14:05Z
    Gimp: multiple use after free in xcf parser
    cvelistv5