CVE-2023-44444

CVE-2023-44444 is a remote code execution vulnerability in GIMP, specifically affecting its handling of PSP files. A crafted PSP file can trigger an off-by-one error in a heap-based buffer, allowing an attacker to execute arbitrary code with user interaction. Rated 7.8 HIGH on CVSS, this vulnerability requires the victim to open a malicious file, but successful exploitation grants high impact to confidentiality, integrity, and availability. While no public exploits or active exploitation are reported, its high FAUCET Risk Score and EPSS percentile suggest a significant potential threat.