GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

CVE-2023-44444

What is CVE-2023-44444?

The vulnerability exists in the parsing mechanism for PSP files within GIMP, where an off-by-one error can occur when calculating the location for data writing in a heap-based buffer. This flaw requires user interaction, as attackers must entice victims to open a crafted PSP file or visit a malicious webpage containing the fictitious file. Upon successful exploitation, an attacker can execute arbitrary code within the context of the GIMP application, leading to a potential compromise of the user's system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References