REDHAT-BUG-2546668: Medium severity GIMP GIMP vulnerability
Finding 3. plug-ins/common/file-dicom.c, exportimage() (~1649–1652). Wrapped width height bpp allocation; GEGL write exceeds buffer. SIGSEGV/ASan WRITE. Vector: export to DICOM on very large image (multi‑GB scale), not a small malicious download alone. CVSS tentative: AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H (6.3).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Users who export very large, multi-gigabyte images to DICOM are the relevant exposure group. The issue is local and requires user interaction.
Is a small malicious downloaded file enough to trigger the problem?
No. The reported trigger is exporting a very large image to DICOM; a small malicious download alone is not described as sufficient.
What is the observed impact when the issue is triggered?
The wrapped allocation can cause a GEGL write beyond the allocated buffer. The report observed a SIGSEGV and an AddressSanitizer-detected write, with integrity and availability impact indicated.