A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a heap-based buffer overflow when the image data is decoded. This buffer overflow corrupts adjacent heap objects, allowing for a controlled memory write that can result in an application crash or arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimpUpgrade gimp-libs | Oct 11, 2026 | Oct 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-debuginfoUpgrade gimp-libsUpgrade gimp-develUpgrade gimp-devel-toolsUpgrade gimp | Oct 19, 2026 | Oct 19, 2026 |
| Debian | — | Upgrade gimp | Sep 21, 2026 | Sep 15, 2026 |
| Redhat_linux | — | No solution existsUpgrade gimp-libs-debuginfoUpgrade gimp-devel-tools-debuginfoUpgrade gimp-debugsourceUpgrade gimp-debuginfoUpgrade gimp-libsUpgrade gimp | Sep 17, 2026 | Sep 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub