A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds p...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately following the pixel buffer is inaccessible; no information disclosure or code execution has been demonstrated.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 gimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 gimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 gimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

advisory security-tracker.debian.org