Gimp: gimp: integer overflow in read_rle_channel()
Historical advisory recorded 2 Nov 2026 10:57:17 UTC. Read the latest advisory.
cve-program · CVE-2026-58384
PublishedA flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-58384
PublishedGimp: gimp: integer overflow in read_rle_channel()
A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
- Source published
- 7 Jul 2026 07:44:28 UTC
- Source modified
- 2 Nov 2026 09:58:49 UTC
- Saved here
- 2 Nov 2026 10:57:17 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H