A heap-based buffer overflow in GIMP version 3.0.4 poses a critical risk of remote code execution if a user opens a specially crafted DCM file.

The vulnerability is a heap-based buffer overflow (CWE-122) occurring during the parsing of DCM files. It stems from insufficient validation of user-supplied data length before copying it to a heap-based buffer, which can be triggered by an unauthenticated attacker when the target opens a malicious file.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code within the context of the user process. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to complete system compromise, data theft, or unauthorized persistence on the host machine.

Immediate Action: Users should avoid opening untrusted or unexpected DCM files until a specific vendor-supplied security update is applied.

Proactive Monitoring: Security teams should monitor for unusual application crashes or unexpected child processes spawned by the GIMP executable.

Compensating Controls: Deploy endpoint protection solutions capable of detecting buffer overflow attempts and restrict the execution of image editing software for users who do not require it for business functions.

Public Exploit Available: Unknown.

This vulnerability presents a significant risk due to the potential for remote code execution. Administrators should track the GIMP project repositories for an official release addressing the fix commit 3d909166463731e94dfe62042d76225ecfc4c1e4 and prioritize deployment as soon as it becomes available.