CyberRota Analysis
AI-GeneratedGIMP's uncompressed DDS image loader is vulnerable to a one-byte out-of-bounds heap read flaw, which can lead to a crash of the file-dds plug-in when accessing inaccessible memory after processing the final pixel. While this vulnerability does not result in information disclosure or code execution, it can disrupt user experience. Users and administrators of GIMP should prioritize addressing this issue to maintain stability in their image processing workflows.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately following the pixel buffer is inaccessible; no information disclosure or code execution has been demonstrated.