Описание
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29289.
A flaw was found in GIMP, specifically within the parsing of High Dynamic Range (HDR) files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafted malicious HDR file, leading to arbitrary code execution in the context of the current process.
Отчет
Red Hat Product Security rates this vulnerability as Important severity because successful exploitation allows arbitrary code execution in the target user's context, though it requires user interaction and does not grant direct privilege escalation. In Red Hat Enterprise Linux environments, GIMP is an optional desktop application rather than a background service, limiting potential attack vectors to interactive user workflows. Exploitation requires inducing a user to load an untrusted High Dynamic Range image file containing malformed dimensions, which triggers an arithmetic overflow in the image processing library during buffer allocation.
Меры по смягчению последствий
Users should exercise caution when opening HDR files from untrusted sources. It is recommended to only open HDR files from known and trusted origins to reduce the risk of exploitation. Additionally, consider running GIMP within a sandboxed environment if processing untrusted files is a regular activity.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | gegl04 | Will not fix | ||
| Red Hat Enterprise Linux 6 | gegl | Out of support scope | ||
| Red Hat Enterprise Linux 6 | gimp | Out of support scope | ||
| Red Hat Enterprise Linux 7 | gegl | Affected | ||
| Red Hat Enterprise Linux 7 | gimp | Not affected | ||
| Red Hat Enterprise Linux 8 | gimp:2.8/gimp | Not affected | ||
| Red Hat Enterprise Linux 9 | gimp | Not affected | ||
| Red Hat Enterprise Linux 8 | gegl04 | Fixed | RHSA-2026:62420 | 02.09.2026 |
| Red Hat Enterprise Linux 8 | gegl | Fixed | RHSA-2026:62425 | 02.09.2026 |
| Red Hat Enterprise Linux 9 | gegl04 | Fixed | RHSA-2026:62170 | 01.09.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.8 High
CVSS3
Связанные уязвимости
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29289.
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of HDR files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29289.
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerabi ...
EPSS
7.8 High
CVSS3