GIMP Integer Overflow Vulnerability in PSD File Parsing Leading to Remote Code Execution

An integer overflow vulnerability has been identified in GIMP's parsing of PSD files. This issue arises from inadequate validation of user-supplied data, allowing for an overflow of 32-bit integer values. As a result, an attacker can execute arbitrary code on the affected system, with the executed code running in the context of the current process. Exploitation of this vulnerability requires user interaction, such as opening a malicious PSD file.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

GIMP has released a patch for this vulnerability. Users can refer to the GIMP GitLab repository for details on the update.