GIMP vulnerabilities

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() causes an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

A flaw was found in GIMP where the PlayStation TIM loader incorrectly calculates the CLUT size due to an integer overflow. Multiplying two 16-bit unsigned short integers (num_colors and num_cluts) can exceed the maximum integer limit, leading to undefined behavior. An attacker can exploit this by providing a specially crafted image file, causing the plug-in to abort and resulting in a denial of service.

An off-by-one error was found in GIMP's PNM file format parser in the pnmscanner_gettoken() function. When parsing a crafted PNM file, a null terminator is written one byte past the end of a stack buffer, leading to memory corruption.

A heap buffer overflow vulnerability was found in GIMP's Paint Shop Pro (PSP) file format parser. The flaw occurs due to incorrect buffer size calculations when processing low bit-depth images, allowing a remote attacker to execute arbitrary code or cause a denial of service (DoS) by tricking a user into opening a specially crafted PSP file.

A double-free vulnerability was found in GIMP's PSP file format parser in the read_layer_block() function. This flaw can lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

A vulnerability in GIMP allows remote code execution via a heap-based buffer overflow when parsing HDR files. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

GIMP has a heap-based buffer overflow vulnerability in HDR file parsing, allowing remote code execution. User interaction is required (opening a malicious file or page).

A buffer overflow vulnerability was found in GIMP's `ReadJeffsImage` function when loading GIF files. Processing a specially crafted GIF file can cause a write beyond the allocated buffer.

A vulnerability in GIMP allows remote code execution during XPM file parsing. The issue stems from missing validation of user-supplied data, leading to an integer overflow before buffer allocation. User interaction is required (opening a malicious file or page).

A heap-based buffer overflow vulnerability in GIMP's PSP file parsing allows remote code execution. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

A heap-based buffer overflow vulnerability in GIMP's JP2 file parsing allows remote code execution. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

Integer overflow vulnerability in GIMP ANI file parsing allows remote code execution. User interaction is required via opening a malicious file or visiting a malicious page.

A vulnerability in GIMP allows remote code execution through parsing of PSD files. The issue stems from missing validation of user-supplied data, leading to an integer overflow before buffer allocation. User interaction is required (opening a malicious file or page).

A vulnerability in GIMP's parsing of XWD files allows remote code execution via an out-of-bounds write. Exploitation requires user interaction, such as opening a malicious file or visiting a crafted webpage.

A heap-based buffer overflow vulnerability in GIMP's ICNS file parsing allows remote code execution. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

A vulnerability in GIMP's XWD file parsing allows remote code execution due to improper validation of user-supplied data, resulting in an out-of-bounds write. User interaction is required, such as opening a malicious file or visiting a malicious page.

A vulnerability in GIMP's PGM file parsing allows remote code execution due to uninitialized memory access. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page.

A heap-based buffer overflow vulnerability in GIMP's ICO file parsing allows remote code execution. Exploitation requires user interaction, such as opening a malicious file or visiting a crafted webpage.

A heap-based buffer overflow vulnerability in GIMP's PSP file parsing allows remote code execution. User interaction is required (opening a malicious file or page).

In GIMP, the "Despeckle" plug-in has an integer overflow vulnerability. Unchecked multiplication of image dimensions (width, height, bytes-per-pixel) can cause insufficient memory allocation and out-of-bounds writes.

A flaw was found in GIMP when processing XCF image files. If a user opens a specially crafted file, GIMP can be tricked into making serious memory errors, potentially leading to crashes and use-after-free issues.

A flaw was found in GIMP when processing specially crafted TGA image files. Opening such a file can cause serious memory errors, leading to a heap buffer overflow and potential crashes.

A vulnerability was found in GIMP's ani_load_image() function, causing a stack-based buffer overflow. Opening a specially crafted .ANI file may allow arbitrary code execution.