Description
A flaw was found in the file-pix (ESM) plugin in GIMP. When processing a specially crafted PIX image file, the plugin allocates a Variable-Length Array (VLA) on the stack without proper bounds checking, causing an unbounded stack allocation followed by a 21-byte stack over-read. This can result in a denial of service due to stack exhaustion and a limited information disclosure of stack memory contents into an intermediate file.
CVSS 6.1EPSS 0.117%Risque 0.62
Voir la source- Publication
- 2026-08-24 18:17:34
- Versions concernées
- unknown
- Type
- Bibliothèque
- Dernière modification
- 2026-08-25 14:16:56
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H