A heap-based buffer overflow vulnerability exists in GIMP's HDR file parsing functionality. This flaw allows remote attackers to execute arbitrary code by convincing a user to open a malicious HDR file or visit a malicious page. The vulnerability arises from improper validation of user-supplied data length before copying it to a heap buffer.