Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A flaw was found in GIMP. The PSD image resource header loader in get_image_resource_header() incorrectly passes the length of a converted resource name string as the destination size argument to g_strlcpy() when copying into a fixed 256-byte stack buffer. Because gimp_any_to_utf8() can expand the Pascal-string payload (for example under a single-byte locale), the copy can write past the end of the stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow in the file-psd plug-in, leading to a crash and potentially arbitrary code execution.