TL;DR

GIMP versions prior to 3.0.2 are affected by an uninitialized memory vulnerability allowing attackers to execute arbitrary code upon opening a specially crafted PGM image file.

What happened

['Remote Code Execution in GIMP through improper handling of PGM files']

Why it matters for ops

['Uninitialized memory in the parsing function leads to unexpected behavior and potential execution of injected malicious code when affected files are processed']

Mitigation

  • Update to the latest version of GIMP (3.0.2)
  • Disable handling of potentially malicious file types until updates are applied

Action items

  • Apply available security patches immediately
  • Review and update policies regarding handling of PGM files

Detection IOCs

  • Unexpected crashes or hangs after opening PGM images
  • Unusual network activity originating from GIMP processes

Source link

http://www.zerodayinitiative.com/advisories/ZDI-26-118/