A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimp-libsUpgrade gimp | Oct 11, 2026 | Aug 31, 2026 |
| Debian | — | Upgrade gimp | Aug 30, 2026 | Aug 30, 2026 |
| Redhat_linux | — | Upgrade gimp-debuginfoUpgrade gimp-libsUpgrade gimp-debugsourceUpgrade gimp-devel-tools-debuginfoUpgrade gimp-libs-debuginfoNo solution existsUpgrade gimp | Aug 12, 2026 | Jun 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub