REDHAT-BUG-2368557: Use After Free
Published May 26, 2025
·Updated
GIMP prior to version 3.0.0 is vulnerable to two use-after-free bugs and one double free bug in its XCF parser. A malicious XCF file may attempt to abuse these vulnerabilities to achieve code execution.
Affected Software
1 affected component
GIMP<3.0.0
Event History
May 26, 2025
Data Sourced
via Red Hat·10:52 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2368557?
The severity of REDHAT-BUG-2368557 is critical due to the potential for code execution through crafted XCF files.
2
How do I fix REDHAT-BUG-2368557?
To fix REDHAT-BUG-2368557, upgrade GIMP to version 3.0.0 or later.
3
What types of vulnerabilities are present in REDHAT-BUG-2368557?
REDHAT-BUG-2368557 contains two use-after-free vulnerabilities and one double free vulnerability in the XCF parser.
4
Who is affected by REDHAT-BUG-2368557?
Users of GIMP versions prior to 3.0.0 are affected by REDHAT-BUG-2368557.
5
What is the impact of exploiting REDHAT-BUG-2368557?
Exploiting REDHAT-BUG-2368557 can lead to arbitrary code execution when processing malicious XCF files.