CyberRota Analysis
AI-GeneratedA vulnerability exists in the file-psd plugin of GIMP, where improper validation of the channel-count parameter in specially crafted PSD image files can lead to heap and stack out-of-bounds access. This flaw may cause application crashes, resulting in denial of service and potential information disclosure. Users and organizations utilizing GIMP, particularly those handling PSD files, should prioritize addressing this issue to mitigate risks.
Original NVD Description
A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack out-of-bounds access. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of memory contents.
Related CVEs
Other vulnerabilities affecting the same vendor(s)