An integer overflow vulnerability in GIMP version 3.0.6 allows remote attackers to execute arbitrary code when a user opens a specially crafted PNM file.

The flaw is an integer overflow (CWE-190) occurring during the parsing of PNM image files. It requires user interaction, specifically the opening of a malicious file, and allows an attacker to execute code within the context of the user process.

The ability for an attacker to achieve remote code execution poses a severe risk to organizational security. Successful exploitation could lead to total system compromise, unauthorized data exfiltration, or the installation of persistent malware, justifying the CVSS score of 7.8.

Immediate Action: Users should avoid opening untrusted or unknown PNM files until a vendor-provided security update or patch is officially released and applied.

Proactive Monitoring: Security teams should monitor endpoint activity for suspicious GIMP process behaviors, such as unexpected child process spawning or unauthorized network connections originating from the application.

Compensating Controls: Deploy host-based intrusion detection systems and endpoint protection tools configured to scan incoming files for anomalies, which may help identify malicious PNM structures before they are processed by the application.

Public Exploit Available: No — no confirmed public exploit exists in the provided data.

Given the potential for remote code execution, this vulnerability represents a high-severity threat to any environment utilizing GIMP 3.0.6. Administrators must prioritize restricting the opening of untrusted files and should closely track the GIMP project repository for an official fix, applying it immediately upon release to remediate the underlying memory safety issue.