Launchpad.net

CVE 2017-17788

In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.

See the CVE page on Mitre.org for more details.