CVE-2025-48796 is a stack-based buffer overflow vulnerability in the GIMP image manipulation program, specifically in the ani_load_image() function. When a user opens a malicious ANI file, the function may write more data to the stack than it can hold, leading to a buffer overflow. This can allow an attacker to execute arbitrary code with limited privileges, requiring user interaction to trigger. The vulnerability affects Red Hat Enterprise Linux 6, as indicated by the affected product information. The CVSS v3.1 vector is AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, reflecting local attack vector, low complexity, low privileges, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to arbitrary code execution with the privileges of the user running GIMP, potentially compromising system confidentiality, integrity, and availability. The attack requires local access and user interaction (opening a malicious ANI file). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2025-48796 for current remediation guidance. No explicit patch or workaround information is provided in the advisory content. Until a patch is available, avoid opening untrusted ANI files with GIMP on affected systems.