CVE-2018-12713

CVE-2018-12713 is a critical vulnerability affecting GIMP through version 2.10.2, where the application's method for generating temporary filenames can lead to overwriting existing files or unauthorized reading of private data. This flaw stems from the g_get_tmp_dir function, which may produce non-unique filenames. The vulnerability carries a CVSS score of 9.1 (CRITICAL), indicating a severe risk. It can be exploited remotely with low attack complexity and no user interaction, potentially leading to high impact on confidentiality and integrity. Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting low public awareness.