GIMP Integer Overflow Vulnerability in Despeckle Plug-in Allowing Heap Corruption and Potential Code Execution

An integer overflow vulnerability has been identified in the GIMP "Despeckle" plug-in. This issue arises from unchecked multiplication of image dimensions, including width, height, and bytes-per-pixel, leading to insufficient memory allocation and out-of-bounds writes. Such memory mismanagement could cause heap corruption, creating opportunities for a denial-of-service attack or, in certain situations, arbitrary code execution.

Impact

Exploitation of this vulnerability can result in heap corruption, causing a denial-of-service condition or allowing arbitrary code execution in specific scenarios.