A critical heap-based buffer overflow vulnerability in GIMP 3.0.6 could allow remote code execution if a user opens a specially crafted PSP file.

The vulnerability exists within the PSP file parsing logic, where improper validation of user-supplied data lengths leads to a heap-based buffer overflow (CWE-122). An unauthenticated attacker can exploit this by tricking a user into opening a malicious file, resulting in code execution within the context of the current process.

The ability for an attacker to execute arbitrary code poses a severe risk to organizational security, potentially leading to full system compromise, data exfiltration, or the installation of persistent malware. With a CVSS score of 7.8, this high-severity flaw represents a significant threat to workstation integrity, particularly for users who frequently process untrusted image files.

Immediate Action: Upgrade GIMP to the latest version that incorporates the fix provided in commit 03575ac8cbb0ef3103b0a15d6598475088dcc15e.

Proactive Monitoring: Monitor workstation file access logs and endpoint detection systems for unusual process execution patterns initiated by the GIMP application.

Compensating Controls: Implement file integrity monitoring and utilize endpoint security software to block the execution of unauthorized or suspicious binaries triggered by image processing software.

Public Exploit Available: No (exploit_available: false)

Given the potential for remote code execution, users and administrators should prioritize updating GIMP to the latest patched version immediately. Until the patch is applied, exercise extreme caution when opening PSP files from untrusted or unknown sources to minimize the risk of triggering this overflow.