A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2026:40751 | |
| https://access.redhat.com/security/cve/CVE-2026-58384 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2497431 | Issue Tracking Third Party Advisory |
| https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217 | Broken Link |
| https://gitlab.gnome.org/GNOME/gimp/-/issues/16216 | Exploit Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Jul 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Jul 2026, 15:21
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/CVE-2026-58384 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2497431 - Issue Tracking, Third Party Advisory | |
| References | () https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217 - Broken Link | |
| References | () https://gitlab.gnome.org/GNOME/gimp/-/issues/16216 - Exploit, Issue Tracking, Vendor Advisory | |
| CPE | cpe:2.3:a:gimp:gimp:3.2.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
|
| First Time |
Gimp gimp
Redhat enterprise Linux Redhat Gimp |
07 Jul 2026, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-07 09:16
Updated : 2026-07-16 14:16
NVD link : CVE-2026-58384
Mitre link : CVE-2026-58384
CVE.ORG link : CVE-2026-58384
JSON object : View
Products Affected
gimp
- gimp
redhat
- enterprise_linux
CWE
CWE-190
Integer Overflow or Wraparound