Security Advisory
CVE-2026-58384
7.3
HIGH
Vulnerability Description
A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Published Date
July 7, 2026
Official Source
NIST NVD Advisory