CyberRota Analysis
AI-GeneratedThe file-xwd plugin in GIMP is vulnerable due to improper validation of image width and bytes-per-line parameters, which can lead to heap out-of-bounds reads. This flaw may cause application crashes, resulting in denial of service, or potentially expose sensitive information from heap memory. Users and organizations utilizing GIMP, particularly in environments where image processing is critical, should prioritize applying updates to mitigate this vulnerability.
Original NVD Description
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation leads to improper bounds checking, causing a heap out-of-bounds read. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of heap memory contents into the produced image.
Related CVEs
Other vulnerabilities affecting the same vendor(s)