CVE-2026-58384: Gimp: gimp: integer overflow in read_rle_channel()

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-07-07 · updated 2026-10-12
Weakness: CWE-190

Description

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

Affected products

GIMP: 3.2.4
Red Hat Enterprise Linux: 9.0

References

https://access.redhat.com/errata/RHSA-2026:40751
https://access.redhat.com/errata/RHSA-2026:73768
https://access.redhat.com/errata/RHSA-2026:80509
https://access.redhat.com/security/cve/CVE-2026-58384
https://bugzilla.redhat.com/show_bug.cgi?id=2497431
https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217
https://gitlab.gnome.org/GNOME/gimp/-/issues/16216

Get alerted when CVE-2026-58384 or the next vulnerability affects your stack