Threat intelligence dashboard
CVE-2026-119528high

Gimp: gimp: stack buffer overflow in psd image resource header loader

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution.

Risk score

7.8

CVSS 3.1

Vendor
Red Hat
Product
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
CWE
CWE-121
Published
Oct 30, 2026
Updated
Oct 31, 2026
CISA KEV
Not flagged

Affected products and versions

Red Hat Enterprise Linux 10

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 6

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 7

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 8

Red Hat

No affected version range was provided.

Red Hat Enterprise Linux 9

Red Hat

No affected version range was provided.

Technical metrics

7.8

CVSS 3.1

Severity
high
Source
redhat
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H