CVE-2012-4433: Gegl

High severity, CVSS 7.5. EPSS: 13.3% chance of exploitation in the next 30 days.

Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large (1) width or (2) height value in a Portable Pixel Map (ppm) image, which triggers a heap-based buffer overflow.

Affected products

• Gegl Gegl: version 0.2.0 only

Published 2012-11-18. Last modified 2026-06-16.