Threats tagged 'ghsa-cqfx-pmhf-jmh6'

A heap-based buffer overflow vulnerability exists in GIMP's DirectDraw Surface (DDS) loader. This occurs due to integer overflow in size calculations when processing crafted DDS images, leading to insufficient buffer allocation and potential heap corruption. The flaw may allow an attacker to execute arbitrary code within the GIMP process context. A security update addressing this issue is available from Red Hat for multiple Red Hat Enterprise Linux 9.8 variants.