PT-2026-55578

CVE-2026-58379

·

Published

2026-07-03

·

Updated

2026-10-20

Description by

CVSS 3.1
7.3
High
MetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)
Description A heap buffer overflow exists in the Paint Shop Pro (PSP) file format parser. The issue occurs when the software incorrectly calculates buffer sizes while processing low bit-depth images, which leads to the overwriting of adjacent memory. A remote attacker can exploit this by tricking a user into opening a specially crafted PSP image file, potentially resulting in arbitrary code execution or a denial of service (DoS).
Recommendations Update GIMP to the patched build provided by your distribution.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2026:38496
CLSA-2026-1784134559
CLSA-2026-1784136022
OESA-2026-3095
OESA-2026-3096
OESA-2026-3097
OPENSUSE-SU-2026:11264-1
OPENSUSE-SU-2026:21359-1
RHSA-2026:38496
SUSE-SU-2026:3399-1
Found an issue in the description? Have something to add? Feel free to write us 👾