CVE-2026-58380

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the PNM file format parser where the pnmscanner gettoken() function contains an off-by-one error in its loop boundary check. When processing a specially crafted PNM file, the function writes a null terminator one byte beyond the end of a stack-allocated buffer. This out-of-bounds write causes memory corruption of adjacent stack memory, which can lead to a denial of service (DoS) via a crash or potentially allow arbitrary code execution in the context of the user opening the file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.