Red Hat Security Advisory: gimp:2.8 security update
Multiple security vulnerabilities have been identified in the GIMP image manipulation program as packaged in Red Hat Enterprise Linux 8.6 and 9. These include use-after-free, heap buffer overflows, and integer overflow issues in the XCF, TGA, and ICO file parsers respectively. Red Hat has released security updates addressing these issues. The vulnerabilities have been rated with a high severity impact by Red Hat Product Security. Users of affected Red Hat Enterprise Linux versions are advised to apply the provided updates to remediate these flaws.
AI Analysis
Technical Summary
The GIMP image editing program in Red Hat Enterprise Linux versions 8 and 9 contains multiple vulnerabilities: CVE-2025-48798 (use-after-free in XCF parser), CVE-2025-48797 (heap buffer overflows in TGA parser), and CVE-2025-5473 (integer overflow in ICO file parsing). These vulnerabilities can lead to memory corruption and potentially impact application stability or security. Red Hat has released security updates for these issues, providing patched versions of GIMP for affected distributions. The advisories include detailed package versions and instructions for remediation.
Potential Impact
The vulnerabilities involve memory corruption issues such as use-after-free, heap buffer overflows, and integer overflow in file parsers within GIMP. These could potentially be exploited to cause application crashes or other unintended behavior. The Red Hat advisory rates the security impact as Important (high severity). There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released official security updates for GIMP addressing these vulnerabilities in Red Hat Enterprise Linux 8 and 9. Users should apply the updates as described in the Red Hat advisories (RHSA-2025:9162 for RHEL 9 and RHSA-2025:9165 for RHEL 8) to remediate these issues. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation actions are required beyond applying the official patches.
Red Hat Security Advisory: gimp:2.8 security update
Description
Multiple security vulnerabilities have been identified in the GIMP image manipulation program as packaged in Red Hat Enterprise Linux 8.6 and 9. These include use-after-free, heap buffer overflows, and integer overflow issues in the XCF, TGA, and ICO file parsers respectively. Red Hat has released security updates addressing these issues. The vulnerabilities have been rated with a high severity impact by Red Hat Product Security. Users of affected Red Hat Enterprise Linux versions are advised to apply the provided updates to remediate these flaws.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The GIMP image editing program in Red Hat Enterprise Linux versions 8 and 9 contains multiple vulnerabilities: CVE-2025-48798 (use-after-free in XCF parser), CVE-2025-48797 (heap buffer overflows in TGA parser), and CVE-2025-5473 (integer overflow in ICO file parsing). These vulnerabilities can lead to memory corruption and potentially impact application stability or security. Red Hat has released security updates for these issues, providing patched versions of GIMP for affected distributions. The advisories include detailed package versions and instructions for remediation.
Potential Impact
The vulnerabilities involve memory corruption issues such as use-after-free, heap buffer overflows, and integer overflow in file parsers within GIMP. These could potentially be exploited to cause application crashes or other unintended behavior. The Red Hat advisory rates the security impact as Important (high severity). There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released official security updates for GIMP addressing these vulnerabilities in Red Hat Enterprise Linux 8 and 9. Users should apply the updates as described in the Red Hat advisories (RHSA-2025:9162 for RHEL 9 and RHSA-2025:9165 for RHEL 8) to remediate these issues. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigation actions are required beyond applying the official patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:9501
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-48797","CVE-2025-48798"]
Threat ID: 6a3da1cd4853345fc18234b1
Added to database: 06/25/2026, 21:46:53 UTC
Last enriched: 08/07/2026, 00:56:49 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 27
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.