CyberRota Analysis
AI-GeneratedA vulnerability in GIMP's PSD parser allows for an integer overflow in the read_RLE_channel() function, leading to inadequate heap allocation and subsequent memory corruption. This flaw can result in denial of service or arbitrary code execution, making it critical for developers and organizations using GIMP to prioritize patching. Users of GIMP, especially those in security-sensitive environments, should address this issue promptly to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)