Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
CVE-2026-58379: GIMP on Linux may execute code from malicious PSP file
CVE-2026-58379 · published 4 months ago
Summary
The GIMP image editor on Red Hat Enterprise Linux (versions 6 through 9) and Debian can be tricked into running unwanted code or crashing when a user opens a specially crafted Paint Shop Pro (PSP) image. The problem occurs because GIMP miscalculates memory size for certain low‑color images, allowing memory corruption. Update GIMP to the latest patched version to protect against this risk.
What to do
- Update debian gimp to version 3.0.4-3+deb13u10.
- Update debian gimp to version 3.2.6-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | red hat | red hat enterprise linux 6 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 9 | All versions |
| Debian:11 | debian | gimp | All versions |
| Debian:12 | debian | gimp | All versions |
| Debian:13 | debian | gimp |
< 3.0.4-3+deb13u10 Fix: upgrade to 3.0.4-3+deb13u10
|
| Debian:14 | debian | gimp |
< 3.2.6-1 Fix: upgrade to 3.2.6-1
|
| Ubuntu:Pro:16.04:LTS | canonical | gimp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | gimp | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | gimp | All versions |
| Ubuntu:Pro:22.04:LTS | canonical | gimp | All versions |
| Ubuntu:Pro:24.04:LTS | canonical | gimp | All versions |
| Ubuntu:25.10 | canonical | gimp | All versions |
| Ubuntu:26.04:LTS | canonical | gimp | All versions |
| – | red hat | red hat enterprise linux 9.6 extended update support | All versions |
| – | red hat | red hat enterprise linux 9.4 update services for sap solutions | All versions |
| – | gimp | gimp |
3.2.1 cpe:2.3:a:gimp:gimp:3.2.1:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_update_services_for_sap_solutions |
9.4 cpe:2.3:a:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux |
9.0 cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux_eus |
9.6 cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* |
| – | red hat | red hat enterprise linux 9.2 update services for sap solutions | All versions |
Original advisory text
Gimp: gimp: heap buffer overflow in read_channel_data()
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.
References
- https://ubuntu.com/security/CVE-2026-58379 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-58379 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:38496 vendor-advisory x_refsource_REDHAT
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58379... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-58379 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:73768 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:80509 vendor-advisory x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:93589 vendor-advisory x_refsource_REDHAT
- https://security-tracker.debian.org/tracker/CVE-2026-58379 Vendor Advisory
- https://access.redhat.com/downloads/content/package-browser/ URL
- https://access.redhat.com/security/cve/CVE-2026-58379 vdb-entry x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2495997 issue-tracking x_refsource_REDHAT
- https://gitlab.gnome.org/GNOME/gimp/-/commit/b630f167
- https://gitlab.gnome.org/GNOME/gimp/-/issues/16205
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-122Heap-based Buffer Overflow
Timeline
Published3 Jul 2026
Updated5 Nov 2026
First seen3 Jul 2026
Sources
DEBIAN-CVE-2026-58379 · OSV
CVE-2026-58379 · NVD
CVE-2026-58379 · MITRE
UBUNTU-CVE-2026-58379 · OSV
CVE-2026-58379 · OSV
Track software like this
Free during beta