Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-48798

Опубликовано: 27 мая 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.3

Описание

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

РелизСтатусПримечание
devel

not-affected

esm-apps/bionic

released

2.8.22-1ubuntu0.1~esm2
esm-apps/focal

released

2.10.18-1ubuntu0.1+esm2
esm-apps/jammy

released

2.10.30-1ubuntu0.1+esm2
esm-apps/noble

released

2.10.36-3ubuntu0.24.04.1+esm2
esm-apps/xenial

released

2.8.16-1ubuntu1.1+esm2
focal

ignored

end of standard support, was needs-triage
jammy

needed

noble

needed

oracular

ignored

end of life, was needs-triage

Показывать по

EPSS

Процентиль: 24%
0.00083
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
redhat
10 месяцев назад

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

CVSS3: 7.3
nvd
10 месяцев назад

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

CVSS3: 7.3
debian
10 месяцев назад

A flaw was found in GIMP when processing XCF image files. If a user op ...

CVSS3: 7.3
github
10 месяцев назад

A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues.

CVSS3: 7.3
fstec
10 месяцев назад

Уязвимость графического редактора GIMP, связанная с использованием памяти после её освобождения, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 24%
0.00083
Низкий

7.3 High

CVSS3

Уязвимость CVE-2025-48798