A heap-based buffer overflow vulnerability exists in libilbm's ILBM file parsing functionality. This flaw allows remote attackers to execute arbitrary code by supplying malicious ILBM files. Exploitation requires user interaction, such as opening a crafted file or visiting a malicious page. The vulnerability arises from improper validation of user-supplied data length before copying to a heap buffer.