CVE-2026-90949

Name of the Vulnerable Software and Affected Versions GIMP (affected versions not specified)

Description A flaw exists in the PSP (Paint Shop Pro) file loader. A heap-based buffer overflow occurs when processing a compressed selection channel because the allocated buffer size does not match the amount of decompressed data. A remote attacker can exploit this by providing a specially crafted PSP file, which may result in a crash or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.