Logo
vulnerabilityCVE-2025-48796
Name
CVE-2025-48796
Source
NVD ( link)Debian ( link)
Description
A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be used to store more information than the capacity allows. This flaw allows a malicious ANI file to trigger arbitrary code execution.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
gimp
False Positive

Vulnerability Ratings#


7.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
yocto
kirkstone
2.10.30
Not Affected
yocto
master
3.2.4
Not Affected