CVE-2018-12713

Name of the Vulnerable Software and Affected Versions GIMP versions 2.10.2 and earlier

Description The issue arises from the use of g get tmp dir calls to establish temporary filenames, which may result in a filename that already exists. This is demonstrated by the gimp write and read file function in app/tests/test-xcf.c. Attackers might leverage this to overwrite files or read file content intended to be private.

Recommendations For GIMP versions 2.10.2 and earlier, consider updating to a version where this issue is resolved, as the current version may allow attackers to overwrite files or read private file content. At the moment, there is no information about a newer version that contains a fix for this vulnerability.