CVE-2009-1570: Gimp

High severity, CVSS 9.3. EPSS: 8% chance of exploitation in the next 30 days.

Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a BMP file with crafted width and height values that trigger a heap-based buffer overflow.

Affected products

• Gimp Gimp: version 2.6.7 only

Published 2009-11-13. Last modified 2026-06-16.