← Back

CVE-2026-58379

nvd nist
Published: Jul 3, 2026Modified: Oct 20, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 5.9
Source: secalert@redhat.com (Secondary)

Description

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.

Affected (4)

Gimp
1 product
Gimp
Redhat
3 products
Enterprise Linux
Enterprise Linux Eus
Enterprise Linux Update Services For Sap Solutions
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Gimp
Version 3.2.1
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Linux
Version 9.0
Enterprise Linux Eus
Version 9.6
Enterprise Linux Update Services For Sap Solutions
Version 9.4

Related CWEs

CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (7)

Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Issue Tracking
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Issue TrackingVendor Advisory

Timeline

No history available yet.