CyberRota Analysis
AI-GeneratedA signed integer overflow vulnerability in the `file-fli` plugin of GIMP affects the processing of FLI image files, allowing for potential exploitation through specially crafted files. This flaw can lead to application crashes, resulting in a denial of service for users. Organizations using GIMP should prioritize patching this vulnerability to mitigate the risk of disruption from malicious file handling.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the `file-fli` plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum integer value. A remote attacker could exploit this by tricking a user into opening a specially crafted FLI file, leading to the application crashing and resulting in a denial of service.