CVE-2026-58379
High
Description
A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.
SeverityHigh
CVSS7.3
Exploit probability—
Product
Gimp
PublishedJul 3, 2026
First seenJul 3, 2026
Weakness typeCWE-122CWE-122
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gimp gimp | 3.2.1 | — |
| redhat enterprise_linux_update_services_for_sap_solutions | 9.4 | — |
| redhat enterprise_linux | 9.0 | — |
| redhat enterprise_linux_eus | 9.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.