Code execution via SGI parsing overflow

Integer overflow in SGI file parsing in GIMP 3.2.2 allows remote attackers to execute arbitrary code via a crafted SGI file. The SGI parser performs insufficient validation on attacker-controlled file data before arithmetic used ahead of memory writes, allowing an integer overflow that corrupts subsequent write handling in the current process. Exploitation requires user interaction, such as opening a malicious file or visiting content that causes GIMP to process it, and no prior account on the host is required.