A heap-based buffer overflow vulnerability in GIMP version 3.0.4 poses a critical risk of remote code execution to users who open untrusted HDR files.

The vulnerability is a heap-based buffer overflow (CWE-122) occurring during the parsing of HDR image files. It stems from improper length validation of user-supplied data, which can be triggered by an unauthenticated attacker if a user is enticed to open a malicious file.

The ability for an attacker to achieve remote code execution in the context of the user process constitutes a severe threat to system integrity and data confidentiality. With a CVSS score of 7.8, this flaw represents a high risk: successful exploitation could allow an attacker to install malware, exfiltrate sensitive files, or gain a foothold within the corporate network.

Immediate Action: Users and administrators should update to the latest available version of GIMP where this vulnerability has been addressed. Reference the provided GitLab commit for verification of the fix.

Proactive Monitoring: Security teams should monitor endpoint activity for unusual spawned processes or unexpected network connections originating from the GIMP application.

Compensating Controls: Deploy endpoint protection solutions capable of detecting buffer overflow attempts and restrict the execution of untrusted software on systems that handle external, high-risk file formats.

Public Exploit Available: No (Exploit_available: false)

Given the potential for remote code execution, this vulnerability should be prioritized for remediation within environments where image processing is a core function. Organizations should ensure that all instances of GIMP 3.0.4 are updated immediately to prevent potential exploitation via malicious HDR files.