A flaw was found in GIMP's Lighting Effects filter. When loading a lighting preset file, lighting-ui.c reads the number of light sources from the file using fscanf() without validating the return value or bounding the parsed count against the fixed-size array of light sources (NUM_LIGHTS, 6 entries). A preset file specifying more than 6 light sources causes writes past the end of the lightsource array, corrupting memory. This issue could be triggered by convincing a user to open a specially crafted lighting preset file in GIMP, potentially leading to a crash or arbitrary code execution in the context of the user running GIMP.