CyberRota Analysis
AI-GeneratedGIMP's APNG file loader and DDS plug-in are susceptible to heap-buffer-overflow vulnerabilities, which can be exploited by opening specially crafted image files. This can result in code execution, posing a significant risk to users. Organizations using GIMP, particularly those handling untrusted image files, should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IHDR` width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.