A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2026-58381 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2496166 | Issue Tracking Vendor Advisory |
| https://gitlab.gnome.org/GNOME/gimp/-/commit/b22e147b | Patch |
| https://gitlab.gnome.org/GNOME/gimp/-/issues/16207 | Vendor Advisory Issue Tracking |
Configurations
History
22 Sep 2026, 15:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:a:gimp:gimp:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
|
| References | () https://access.redhat.com/security/cve/CVE-2026-58381 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2496166 - Issue Tracking, Vendor Advisory | |
| References | () https://gitlab.gnome.org/GNOME/gimp/-/commit/b22e147b - Patch | |
| References | () https://gitlab.gnome.org/GNOME/gimp/-/issues/16207 - Vendor Advisory, Issue Tracking | |
| First Time |
Redhat
Gimp Redhat enterprise Linux Gimp gimp |
Information
Published : 2026-07-02 20:17
Updated : 2026-09-22 15:21
NVD link : CVE-2026-58381
Mitre link : CVE-2026-58381
CVE.ORG link : CVE-2026-58381
JSON object : View
Products Affected
redhat
- enterprise_linux
gimp
- gimp
CWE
CWE-415
Double Free