Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM (2) PNM (3) PSD (4) PSP (5) Sun RAS (6) XBM and (7) XWD files.