CyberRota Analysis
AI-GeneratedA vulnerability in GIMP's PNM file format parser allows for memory corruption due to an off-by-one error in the pnmscanner_gettoken() function, which writes a null terminator beyond the allocated buffer. This flaw could lead to denial of service or arbitrary code execution when processing specially crafted PNM files. Users and organizations utilizing GIMP, especially in environments where file uploads are common, should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)