In GIMP 2.8.22, there is a heap-based buffer overflow in readchanneldata in plug-ins/common/file-psp.c.
{ "urgency": "not yet assigned" }