Threats tagged 'ghsa-cch8-wx4h-hxqr'

A heap out-of-bounds read and write vulnerability exists in GIMP's PSD thumbnail resource loader due to improper handling of a crafted grayscale PSD thumbnail. This flaw can cause a crash and potentially allow arbitrary code execution when a user opens or browses a malicious PSD file. The issue arises from a fixed 3-byte stride BGR-to-RGB channel swap that does not verify the JPEG thumbnail is RGB.