Y2
Public vulnerability disclosure

CVE-2026-58379

Gimp: gimp: heap buffer overflow in read_channel_data()

publishedCWE-122

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.

Investigate in Cyber JSONMarkdown
Technical severity7.3 highCVSS 3.1 · CNA: redhat
Published2026-07-03Source updated 2026-11-02
Collected2026-11-022 attributed sources

Fixes and workarounds

Workaround

To mitigate this vulnerability, users should avoid opening untrusted Paint Shop Pro (PSP) image files with GIMP. As a general security practice, it is recommended to only process image files from trusted sources. If GIMP is not essential, consider removing the package to eliminate the attack surface.

Source: CNA: redhat

Affected products and versions

ProductVersionsAuthority
Red Hat Enterprise Linux 9
Red Hat
gimp
https://access.redhat.com/downloads/content/package-browser/ 		≥ 2:3.0.4-4.el9_8.5; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red Hat
gimp
https://access.redhat.com/downloads/content/package-browser/ 		≥ 2:2.99.8-4.el9_2.7; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red Hat
gimp
https://access.redhat.com/downloads/content/package-browser/ 		≥ 2:2.99.8-4.el9_4.19; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Enterprise Linux 9.6 Extended Update Support
Red Hat
gimp
https://access.redhat.com/downloads/content/package-browser/ 		≥ 2:2.99.8-4.el9_6.20; < * (unaffected, rpm)
Other versions: affected 		CNA: redhat
Red Hat Enterprise Linux 6
Red Hat
gimp
https://access.redhat.com/downloads/content/package-browser/ 		Range not reported
Other versions: unaffected 		CNA: redhat
Red Hat Enterprise Linux 7
Red Hat
gimp
https://access.redhat.com/downloads/content/package-browser/ 		Range not reported
Other versions: unaffected 		CNA: redhat
Red Hat Enterprise Linux 8
Red Hat
gimp:2.8/gimp
https://access.redhat.com/downloads/content/package-browser/ 		Range not reported
Other versions: unaffected 		CNA: redhat

Version ranges are source assertions. Check the vendor advisory and your installed configuration before determining exposure.

CVSS assessments

Version / scoreVectorAuthority
3.1 / 7.3
high		 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HCNA: redhat

Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

References