DEBIAN-CVE-2025-48797

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow.

References

https://security-tracker.debian.org/tracker/CVE-2025-48797

Affected packages

Debian:11 / gimp

Package

Name: gimp
Purl: pkg:deb/debian/gimp?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.22-4+deb11u3

Affected versions

2.*

2.10.22-4

2.10.22-4+deb11u1

2.10.22-4+deb11u2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / gimp

Package

Name: gimp
Purl: pkg:deb/debian/gimp?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.34-1+deb12u3

Affected versions

2.*

2.10.34-1

2.10.34-1+deb12u1

2.10.34-1+deb12u2

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / gimp

Package

Name: gimp
Purl: pkg:deb/debian/gimp?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.0~RC1-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / gimp

Package

Name: gimp
Purl: pkg:deb/debian/gimp?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.0~RC1-4

Ecosystem specific

{
    "urgency": "not yet assigned"
}