An integer overflow vulnerability in GIMP allows remote attackers to execute arbitrary code on systems if a user opens a specifically crafted XPM file.

This vulnerability is an integer overflow flaw (CWE-190) occurring during the parsing of XPM files. The issue arises from insufficient validation of user-supplied data, which can lead to a buffer allocation error and subsequent remote code execution in the context of the user process.

The potential for remote code execution poses a significant risk to organizational endpoints, as a successful exploit could lead to full system compromise or unauthorized access to sensitive data. With a CVSS score of 7.8, this vulnerability represents a high-severity threat that necessitates immediate attention to prevent potential data breaches or unauthorized administrative control over affected workstations.

Immediate Action: Update GIMP to the latest version that incorporates the fix provided in commit 2e7ed91793792d9e980b2df4c829e9aa60459253.

Proactive Monitoring: Review endpoint security logs for anomalous behavior in image processing applications and restrict the opening of untrusted files from unknown sources.

Compensating Controls: Deploy endpoint protection solutions capable of detecting malicious file execution patterns and enforce the use of least privilege for users to minimize the impact of potential code execution.

Public Exploit Available: Unknown

Given the high CVSS score and the potential for remote code execution, organizations should prioritize patching all instances of GIMP version 3.0.8. Users should be advised to exercise caution when opening image files from untrusted or external sources until the update is applied across the environment.