CyberRota Analysis
AI-GeneratedThe file-fits plugin in GIMP is vulnerable due to an integer overflow when processing crafted FITS image files, leading to an undersized heap-based buffer allocation. This flaw can result in memory corruption, potentially allowing for arbitrary code execution or a denial of service. Organizations using GIMP, especially those handling FITS image files, should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an undersized heap-based buffer allocation. This integer overflow issue results in a heap-based buffer overflow when cfitsio subsequently writes a full row of pixels in the buffer, causing memory corruption, potentially leading to arbitrary code execution or a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)