The integer overflow occurs in GIMP's PlayStation TIM loader when it multiplies two 16‑bit unsigned short values, num_colors and num_cluts, to compute the size of the Colour Look‑Up Table (CLUT). If a crafted image causes the multiplication to exceed the maximum representable integer, the plugin exhibits undefined behaviour and terminates. Because the plugin crash causes the entire GIMP application to exit, the effect is a denial of service to the user running the program.

Red Hat Enterprise Linux 6 through 9 ship the GIMP package that includes the vulnerable PlayStation TIM loader plug‑in. Any system running the standard GIMP installation from these distributions is potentially exposed. Systems that have disabled the plug‑in or use a custom build of GIMP that omits the loader may avoid the issue, but such configurations are not the default.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score below 1 % suggests a very low but non‑zero chance that this flaw will be exploited today. The vulnerability is not listed in the CISA KEV catalog, so no publicly known exploits exist. An attacker would need to craft a PlayStation TIM file containing malicious values and deliver it to a user running GIMP – most likely through a file open operation or by embedding the image in a document. Because Red Hat reports no workaround, operators should avoid opening untrusted TIM files, sandbox GIMP, or disable the loader while awaiting an official fix.