Improper resource allocation - Buffer overflow In gimp
Description
GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. Crafted data in a PSP file can trigger an off-by-one error when calculating a location to write within a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-22097.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 2.10.34-1+deb12u1 | ||
debian 11 | 2.10.22-4+deb11u1 | ||
debian 13 | 2.10.36-1 | ||
debian 14 | 2.10.36-1 | ||
 rpm rhel9.4 | 2:2.99.8-4.el9_4 | ||
rpm rhel8 | 2:2.8.22-26.module+el8.10.0+22678+3f0023d6 | ||
rpm rhel9 | 2:2.99.8-4.el9_6 | ||
rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
rpm rhel8.6 | 2:2.8.22-18.module+el8.6.0+21241+b15d72f3 |
1-10 of 13
10
Aliases