GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2023-44441

What is CVE-2023-44441?

This vulnerability involves a heap-based buffer overflow that arises during the parsing of DDS files. The flaw is due to insufficient validation of length in user-supplied data, allowing attackers to exploit this weakness and execute arbitrary code within the context of the application. Successful exploitation requires user interaction, specifically that the target visits a malicious web page or opens a specially crafted file. This significant security risk can affect installations of GIMP, underscoring the need for users to ensure they are on the latest version to mitigate potential threats.

References