Threats tagged 'ghsa-prrm-332r-r58h'

A stack-based buffer overflow vulnerability exists in GIMP's PSD plug-in image resource header loader due to incorrect handling of destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a crash and potentially allow arbitrary code execution with the privileges of the user running GIMP. Exploitation requires user interaction to open or trigger parsing of a malicious PSD file. Mitigation includes avoiding untrusted PSD files and removing GIMP if not needed.