A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9569 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9501 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9310 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9308 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9316 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9314 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9315 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9309 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9165 advisory.

    - fix CVE-2025-5473 (RHEL-95696)
    - fix CVE-2025-48797 (RHEL-93503)
    - fix CVE-2025-48798 (RHEL-93506)

    pygobject2

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9162 advisory.

    - fix CVE-2025-5473 (RHEL-95700)
    - fix CVE-2025-48797 (RHEL-93521)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9165 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:9162 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: Multiple use after free in XCF parser (CVE-2025-48798)

    * gimp: Multiple heap buffer overflows in TGA parser (CVE-2025-48797)

    * gimp: GIMP ICO File Parsing Integer Overflow (CVE-2025-5473)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5939 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5939-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     June 06, 2025                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : gimp     CVE ID         : CVE-2025-2760 CVE-2025-2761 CVE-2025-48797 CVE-2025-48798

    Several vulnerabilities were discovered in GIMP, the GNU Image     Manipulation Program, which could result in denial of service or     potentially the execution of arbitrary code if malformed XCF, TGA, DDS,     FLI or ICO files are opened.

    For the stable distribution (bookworm), these problems have been fixed in     version 2.10.34-1+deb12u3.

    We recommend that you upgrade your gimp packages.

    For the detailed security status of gimp please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gimp

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
240507	RHEL 8 : gimp:2.8 (RHSA-2025:9569)	Nessus	Red Hat Local Security Checks	high
240471	RHEL 7 : gimp (RHSA-2025:9501)	Nessus	Red Hat Local Security Checks	high
240269	RHEL 8 : gimp:2.8 (RHSA-2025:9310)	Nessus	Red Hat Local Security Checks	high
240267	RHEL 8 : gimp:2.8 (RHSA-2025:9308)	Nessus	Red Hat Local Security Checks	high
240266	RHEL 9 : gimp (RHSA-2025:9316)	Nessus	Red Hat Local Security Checks	high
240252	RHEL 9 : gimp (RHSA-2025:9314)	Nessus	Red Hat Local Security Checks	high
240251	RHEL 9 : gimp (RHSA-2025:9315)	Nessus	Red Hat Local Security Checks	high
240249	RHEL 8 : gimp:2.8 (RHSA-2025:9309)	Nessus	Red Hat Local Security Checks	high
240184	Oracle Linux 8 : gimp:2.8 (ELSA-2025-9165)	Nessus	Oracle Linux Local Security Checks	high
240143	Oracle Linux 9 : gimp (ELSA-2025-9162)	Nessus	Oracle Linux Local Security Checks	high
240104	RHEL 8 : gimp:2.8 (RHSA-2025:9165)	Nessus	Red Hat Local Security Checks	high
240098	RHEL 9 : gimp (RHSA-2025:9162)	Nessus	Red Hat Local Security Checks	high
237912	Debian dsa-5939 : gimp - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2025-48798

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high