GIMP crashing under certain XCF files

See how you can crash you lovely graphic editor.

The bug

GIMP, a popular multi-platform graphic editor, was found three weeks ago to suffer from improper input file processing leading to crash. In other words, a specially-crafted XCF file will crash the editor if one tries to open it.

The problematic function was gimp_layer_invalidate_boundary that could crash if the mask channel is NULL.

If curious, one can try crashing his GIMP by loading this XCF provided by the project developers. Then something like this will pop up:

GIMP crash handler

The CVE

Though the bug was already fixed last week, the CVE-2022-32990 was assigned to it just a couple of days ago.

Useful Links