CVE-2025-48798 is a use-after-free vulnerability in the GIMP image manipulation program when processing XCF image files. This flaw allows an attacker to craft malicious XCF files that trigger memory errors in GIMP, potentially leading to application crashes or arbitrary code execution. The vulnerability affects GIMP versions included in Red Hat Enterprise Linux 7 Extended Lifecycle Support, 8 (versions >=8.0.0 <8.10.0), and 9 (versions >=9.0.0 <9.8.0). Red Hat has issued security advisories RHSA-2025:9162 and RHSA-2025:9165 providing patches for these versions. The CVSS score of 7.3 reflects a high-severity vulnerability with local attack vector requiring low privileges and user interaction.

Successful exploitation of this use-after-free vulnerability can lead to serious memory corruption in GIMP, resulting in application crashes and potentially allowing an attacker to execute arbitrary code with the privileges of the user running GIMP. The CVSS vector indicates high impact on confidentiality, integrity, and availability. However, exploitation requires local access with low privileges and user interaction (opening a malicious file). There are no known exploits in the wild currently.

Red Hat has released official security updates addressing CVE-2025-48798 for affected GIMP packages in Red Hat Enterprise Linux 7 Extended Lifecycle Support, 8, and 9. Users should apply these updates promptly following Red Hat's guidance at https://access.redhat.com/articles/11258. Since patches are available and provided by the vendor, applying the official fixes is the recommended mitigation. No additional vendor-recommended mitigations or workarounds are indicated.