REDHAT-BUG-2461725: Buffer Overflow
A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the fcTL width exceeds the IHDR width, leading to pixel data being written past the end of a heap allocation. Additionally, a heap-based buffer overflow exists in the DDS plug-in due to a BPP mismatch in the loadlayer() function. Both vulnerabilities can be triggered by opening a specially crafted image file, potentially leading to code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2461725?
The severity of REDHAT-BUG-2461725 is classified as medium with a score of 4.
What causes the vulnerability identified as REDHAT-BUG-2461725?
The vulnerability REDHAT-BUG-2461725 is caused by a heap-buffer-overflow in the APNG file loader when the `fcTL` width exceeds the `IHDR` width.
How do I fix REDHAT-BUG-2461725?
To fix REDHAT-BUG-2461725, update GIMP and the GIMP DDS plug-in to the latest patched versions that address this vulnerability.
Which software is affected by REDHAT-BUG-2461725?
The affected software by REDHAT-BUG-2461725 includes GIMP and the GIMP DDS plug-in.
What are the potential consequences of REDHAT-BUG-2461725?
The potential consequences of REDHAT-BUG-2461725 include possible crashes and security risks due to unauthorized access through buffer overflow.