CVE-2026-58381

Published: Jul 2, 2026Modified: Sep 22, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.

Affected (5)

Products: Gimp: Gimp · Redhat: Enterprise Linux

1 product

1 product

Enterprise Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gimp Gimp	version ≤ 3.2.1

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0

Related CWEs

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (4)

https://access.redhat.com/security/cve/CVE-2026-58381

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2496166

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://gitlab.gnome.org/GNOME/gimp/-/commit/b22e147b

Source: secalert@redhat.com

Patch

https://gitlab.gnome.org/GNOME/gimp/-/issues/16207

Source: secalert@redhat.com

Vendor AdvisoryIssue Tracking

Timeline

No history available yet.