VULNERABILITY INTELLIGENCE

CVE-2009-1570

CVSS score9.3 HIGH
EPSS probability8.04%
CISA KEVNot currently listed
Published2009-11-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references