CVE-2026-59091

Published: Aug 10, 2026Modified: Aug 24, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts without requiring further user interaction.

Affected (4)

Products: Gimp: Gimp · Redhat: Enterprise Linux

1 product

1 product

Enterprise Linux

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Gimp Gimp	Version 3.2.6
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://access.redhat.com/security/cve/CVE-2026-59091

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2496585

Source: secalert@redhat.com

Issue TrackingVendor Advisory

https://gitlab.gnome.org/GNOME/gimp/-/work_items/16510

Source: secalert@redhat.com

ExploitMitigationVendor Advisory

Timeline

No history available yet.