CVE-2025-48797 is a heap-based buffer overflow vulnerability in the TGA parser component of GIMP. When a user opens a maliciously crafted TGA image file, GIMP may perform unsafe memory operations leading to heap buffer overflows. This can result in application crashes and potentially allow an attacker to execute arbitrary code or cause denial of service. The vulnerability is present in GIMP versions included in Red Hat Enterprise Linux 7 Extended Lifecycle Support, versions >=8.0.0 and <8.10.0, and versions >=9.0.0 and <9.8.0. Red Hat has issued security advisories RHSA-2025:9162 and RHSA-2025:9165 providing patches for affected versions. The CVSS vector indicates the attack requires local access with low privileges and user interaction, but can lead to high confidentiality, integrity, and availability impact.

Successful exploitation of this vulnerability can cause GIMP to crash and may lead to arbitrary code execution or denial of service due to heap buffer overflow. The CVSS score of 7.3 reflects high impact on confidentiality, integrity, and availability. The attack vector is local with low complexity and requires user interaction (opening a crafted TGA file). There are no known exploits in the wild currently.

Red Hat has released official security updates that fix this vulnerability. Users should apply the updates provided in advisories RHSA-2025:9162 for Red Hat Enterprise Linux 9 and RHSA-2025:9165 for Red Hat Enterprise Linux 8. Details and instructions for applying these updates are available at https://access.redhat.com/articles/11258. Applying these patches will remediate the heap buffer overflow in the GIMP TGA parser. No additional mitigation steps are required beyond applying the official fixes.