GIMP Heap-Based Buffer Overflow Vulnerability in ICO File Parsing Allowing Remote Code Execution

A heap-based buffer overflow vulnerability has been identified in GIMP, specifically within the ICO file parsing process. This issue arises from inadequate validation of user-supplied data lengths before they are copied to a heap-based buffer. As a result, remote attackers can execute arbitrary code on affected GIMP installations. Exploitation of this vulnerability requires user interaction, as the target must open a malicious ICO file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, executed in the context of the current process.

Remediation

GIMP has released a patch for this vulnerability. Users can refer to the GIMP GitLab repository for details on the update.