The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in GIMP's PSP (Paint Shop Pro) file parser. A remote attacker could exploit an integer overflow vulnerability in the read_creator_block() function by providing a specially crafted PSP image file. This vulnerability occurs when a 32-bit length value from the file is used for memory allocation without proper validation, leading to a heap overflow and an out-of-bounds write. Successful exploitation could result in an application level denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade gimp-libsUpgrade gimp-develUpgrade gimp-devel-toolsUpgrade gimpUpgrade gimp-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade gimp | Feb 19, 2026 | Feb 19, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 10, 2026 |
| Suse | — | Upgrade libgimp-2_0-0-32bitUpgrade libgimpui-2_0-0-32bitUpgrade gimp-develUpgrade gimp-plugin-aaUpgrade gimp-langUpgrade gimpUpgrade libgimpui-2_0-0Upgrade libgimp-2_0-0 | Feb 25, 2026 | Feb 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub