A memory corruption vulnerability in the GIMP PSD parser could allow an attacker to execute arbitrary code or crash the application if a user is tricked into opening a malicious file.

This vulnerability is caused by an integer overflow (CWE-190) within the GIMP PSD parser, requiring a local, authenticated user to interact with a specially crafted PSD file for successful exploitation.

A successful exploit could result in full application compromise, potentially leading to unauthorized data access or the execution of malicious code with the privileges of the user running the application. With a CVSS score of 7.3, this flaw poses a significant risk to workstations where users frequently handle untrusted image files, potentially impacting the integrity and availability of local system resources.

Immediate Action: Apply the latest security updates provided by your Linux distribution vendor to ensure the GIMP package is patched.

Proactive Monitoring: Review system logs for signs of application crashes or unusual process behavior associated with GIMP or image processing tasks.

Compensating Controls: Advise users to avoid opening untrusted or unknown PSD files and ensure that GIMP is run with the minimum necessary privileges to reduce the impact of a potential compromise.

Public Exploit Available: false

Users should prioritize updating their systems to the latest available package versions provided by Red Hat. Given the potential for arbitrary code execution, this update should be applied as part of standard routine maintenance for all affected enterprise workstations.