The vulnerability is a heap‑based buffer overflow in GIMP’s TIF parsing routine. Unvalidated user data length is copied without bounds checks, allowing an attacker supplying a crafted TIF file to overwrite memory and execute arbitrary code in the context of the current user. The flaw can lead to complete compromise of the affected system, as the attacker gains the privileges of the running GIMP process. The CVE report describes it as a remote code execution vulnerability with a required user interaction step to open a malicious file or visit a suspicious page.

All installations of GIMP that include the buggy TIF parser are affected. The product vendor is GIMP; no specific version range is listed, so any version prior to the release that includes this unpatched code is vulnerable.

The CVSS score is 7.8, indicating high severity. The EPSS score is currently unavailable, so the known exploitation likelihood cannot be quantified, but the attack requires local user interaction with a malicious file. The vulnerability is not present in CISA KEV catalog, suggesting no publicly disclosed exploits as of the last update. Nonetheless, because it allows remote execution and depends on a user opening a TIF file, the risk remains significant for users who routinely open files from uncertain sources.