A flaw in GIMP’s PlayStation TIM loader leads to an integer overflow when it multiplies two 16‑bit unsigned short values, num_colors and num_cluts, to calculate the size of the Colour Look‑Up Table. If the multiplication exceeds the maximum representable integer, the plug‑in exhibits undefined behaviour and terminates, causing the entire GIMP application to exit. The most likely attack vector is an attacker providing a specially crafted TIM image file that the user opens or that is embedded in a document, resulting in a denial of service to the user running GIMP. The vulnerability is classified as CWE‑190, an integer overflow.

Red Hat Enterprise Linux 6, 7, 8, and 9 ship the standard GIMP package that includes the vulnerable PlayStation TIM loader plug‑in. Any system that uses the default GIMP installation from these distributions is potentially exposed. Systems that have removed or disabled the plug‑in or that use a GIMP build that omits the loader may not be affected, but such configurations are not the default for most installations. The input does not provide version details for the GIMP package itself, so the affected product range is limited to the operating system releases listed.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1 % suggests a very low but non‑zero chance that this flaw will be actively exploited today. The vulnerability is not listed in the CISA KEV catalog, so no publicly known exploits exist. An attacker would need to craft a PlayStation TIM file containing malicious numeric values and deliver it to a user who opens the file in GIMP – either directly or via an embedded file in another application. The lack of a publicly available workaround means operators should aim to prevent opening untrusted TIM files, restrict user access to the plug‑in, or sandbox GIMP to contain any potential crash.