CyberRota Analysis
AI-GeneratedA vulnerability exists in GIMP's PlayStation TIM loader, where an integer overflow occurs during the calculation of the Color Look-Up Table size, potentially leading to undefined behavior. This flaw can be exploited by attackers through specially crafted image files, resulting in a denial of service as the GIMP plug-in may crash. Users and administrators of GIMP, particularly those handling PlayStation image files, should prioritize addressing this issue to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table (CLUT) due to an integer overflow. This occurs when multiplying num_colors and num_cluts, both 16-bit unsigned short integers, resulting in a value exceeding the maximum integer limit. An attacker could exploit this by providing a specially crafted image file, leading to undefined behavior and causing the GIMP plug-in to abort, effectively resulting in a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)