GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

CVE-2023-44444

What is CVE-2023-44444?

The vulnerability exists in the parsing mechanism for PSP files within GIMP, where an off-by-one error can occur when calculating the location for data writing in a heap-based buffer. This flaw requires user interaction, as attackers must entice victims to open a crafted PSP file or visit a malicious webpage containing the fictitious file. Upon successful exploitation, an attacker can execute arbitrary code within the context of the GIMP application, leading to a potential compromise of the user's system.

References