A heap-based buffer overflow vulnerability exists in GIMP's parsing of DCM files, allowing remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The flaw arises from improper validation of user-supplied data length before copying to a heap buffer.