This advisory covers three distinct vulnerabilities in GIMP: CVE-2025-48798 (multiple use-after-free in the XCF parser), CVE-2025-48797 (multiple heap buffer overflows in the TGA parser), and CVE-2025-5473 (integer overflow in ICO file parsing). These vulnerabilities could lead to memory corruption and potentially arbitrary code execution if exploited. Red Hat has released security updates for GIMP version 2.8.22-1.el7_9.2 on Red Hat Enterprise Linux 7 Extended Lifecycle Support to address these issues. No CVSS scores are provided in the advisory, but the severity is rated as important by Red Hat Product Security.

The vulnerabilities involve memory corruption issues such as use-after-free, heap buffer overflows, and integer overflow in file parsers of GIMP. Exploitation could allow an attacker to cause application crashes or potentially execute arbitrary code. The advisory rates the security impact as important, indicating a high risk to affected systems if unpatched.

Red Hat has released patched versions of GIMP (2.8.22-1.el7_9.2) for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Users should apply these official updates promptly to remediate the vulnerabilities. Detailed update instructions are available in the Red Hat advisory article (https://access.redhat.com/articles/11258). No additional mitigation steps are indicated or required beyond applying the provided patches.