CVE-2026-2271

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the PSP (Paint Shop Pro) file parser. A remote attacker can trigger an integer overflow in the read creator block() function by providing a specially crafted PSP image file. This occurs when a 32-bit length value from the file is used for memory allocation without proper validation, resulting in a heap overflow and an out-of-bounds write. Successful exploitation may lead to an application-level denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.