GIMP PVR Image Loader Stack-Based Buffer Overflow Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in GIMP's PVR image loader. Processing specially crafted PVR image files with large dimensions can cause the application to crash. This issue arises from a stack-based buffer overflow and an out-of-bounds read, creating a vulnerability that affects systems handling untrusted PVR images.

Impact

Exploiting this vulnerability causes GIMP to crash, interrupting any ongoing work and potentially leading to data loss.

Remediation

Users are advised to avoid processing untrusted PVR image files, especially from unknown or suspicious sources. If GIMP is used to open such files, consider doing so in a sandboxed environment to minimize potential impact.