--- gimp-2.2.8.orig/app/xcf/xcf-load.c
+++ gimp-2.2.8/app/xcf/xcf-load.c
@@ -1661,6 +1661,12 @@
           continue;
         }
 
+      if (num_axes < 2 || num_axes > 6)
+        {
+          g_printerr ("bad number of axes in stroke description\n");
+          return FALSE;
+        }
+
       control_points = g_value_array_new (num_control_points);
 
       anchor.selected = FALSE;