Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Finding 7. plug-ins/common/hot.c, pluginCore() (~429–443, 618). Same wrapped allocation vs internal/GEGL consumer extent. ASan WRITE. Vector: apply Hot filter on oversized image (filter path, not file parser). CVSS tentative: 6.3 (AC:H).