CyberRota Analysis
AI-GeneratedA vulnerability in GIMP allows for an out-of-bounds write when processing a specially crafted lighting preset file, due to improper validation of light sources in the Lighting Effects filter. This flaw can lead to memory corruption, potentially resulting in application crashes or arbitrary code execution if a user is tricked into opening a malicious file. Organizations using GIMP, particularly those handling untrusted files, should prioritize addressing this issue to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicious preset file, potentially causing a crash or enabling arbitrary code execution.