A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimp-libsUpgrade gimp | Oct 11, 2026 | Aug 31, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimpUpgrade gimp-debuginfoUpgrade gimp-devel-toolsUpgrade gimp-libsUpgrade gimp-devel | Oct 19, 2026 | Oct 19, 2026 |
| Debian | — | Upgrade gimp | Aug 30, 2026 | Aug 30, 2026 |
| Oracle_linux | — | Upgrade gimp-libsUpgrade gimp | Oct 22, 2026 | Aug 10, 2026 |
| Redhat_linux | — | Upgrade gimpNo solution existsUpgrade gimp-libs-debuginfoUpgrade gimp-devel-tools-debuginfoUpgrade gimp-debuginfoUpgrade gimp-libsUpgrade gimp-debugsource | Aug 12, 2026 | Jun 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub