GIMP
cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*, +1 more
- < 3.0.0
A heap buffer overflow vulnerability has been identified in GIMP versions prior to 3.0.0, specifically within the TGA image file parser. This vulnerability arises from improper handling of certain TGA files, which can be crafted by an attacker to exploit memory management flaws. The exploitation of this vulnerability may lead to memory corruption, application crashes, and potentially allow for arbitrary code execution.
Exploitation of this vulnerability causes multiple heap buffer overflows, which can lead to memory corruption and application crashes. Additionally, according to Red Hat, such heap-based buffer overflows could be exploited to execute arbitrary code.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.