CVE-2026-58379 – Gimp: gimp: heap buffer overflow in read_channel_data()

CVE ID :CVE-2026-58379

Published : July 3, 2026, 6:29 p.m. | 1 hour, 17 minutes ago

Description :A flaw was found in GIMP’s Paint Shop Pro (PSP) file format parser. This heap buffer overflow vulnerability allows a remote attacker to cause arbitrary code execution or a denial of service (DoS) by tricking a user into opening a specially crafted PSP image file. The vulnerability occurs because the software incorrectly calculates buffer sizes when processing low bit-depth images, leading to an overwrite of adjacent memory.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…