GIMP Use-After-Free Vulnerability in XCF File Parsing Allows Remote Code Execution

A use-after-free vulnerability has been identified in GIMP, specifically within the XCF file parsing process. This flaw arises from inadequate validation of object existence before performing operations, enabling remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, such as opening a malicious XCF file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, executed in the context of the current process.

Remediation

GIMP has released a patch for this vulnerability. Users can refer to the GIMP GitLab repository for details on the update.