Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pp89-6qxc-wh8f

Опубликовано: 07 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

EPSS

Процентиль: 12%
0.00219
Низкий

7.3 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.3
ubuntu
25 дней назад

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

CVSS3: 7.3
redhat
4 месяца назад

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

CVSS3: 7.3
nvd
25 дней назад

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

CVSS3: 7.3
debian
25 дней назад

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE ...

EPSS

Процентиль: 12%
0.00219
Низкий

7.3 High

CVSS3

Дефекты

CWE-190