CyberRota Analysis
AI-GeneratedA vulnerability exists in GIMP's PSD file format plugin, where an unsigned integer underflow in the `block_rem` variable can be exploited when opening a specially crafted `.psd` file. This flaw allows attackers to inject arbitrary data, potentially leading to arbitrary code execution on the victim's system. Users and organizations utilizing GIMP, particularly those handling PSD files, should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.