CVE-2026-58379: Heap-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 6
A heap-based buffer overflow vulnerability exists in GIMP's Paint Shop Pro (PSP) file format parser on Red Hat Enterprise Linux 6. This flaw allows a remote attacker to cause arbitrary code execution or denial of service by tricking a user into opening a specially crafted PSP image file. The vulnerability arises from incorrect buffer size calculations when processing low bit-depth images, leading to memory overwrite.
AI Analysis
Technical Summary
CVE-2026-58379 is a heap buffer overflow vulnerability in the PSP file format parser of GIMP included in Red Hat Enterprise Linux 6. The issue is due to improper calculation of buffer sizes for low bit-depth images, which results in overwriting adjacent memory on the heap. Exploitation requires a user to open a maliciously crafted PSP image file, potentially allowing arbitrary code execution or denial of service. The CVSS 3.1 base score is 7.3, indicating high severity with local attack vector, low complexity, low privileges required, and user interaction needed.
Potential Impact
Successful exploitation can lead to arbitrary code execution or denial of service on affected systems. The attack requires local access with the ability to trick a user into opening a crafted PSP image file, which could compromise confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58379 for current remediation guidance. No official fix or workaround details are provided in the available data.
CVE-2026-58379: Heap-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 6
Description
A heap-based buffer overflow vulnerability exists in GIMP's Paint Shop Pro (PSP) file format parser on Red Hat Enterprise Linux 6. This flaw allows a remote attacker to cause arbitrary code execution or denial of service by tricking a user into opening a specially crafted PSP image file. The vulnerability arises from incorrect buffer size calculations when processing low bit-depth images, leading to memory overwrite.
CVSS v3.1
Score 7.3high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-58379 is a heap buffer overflow vulnerability in the PSP file format parser of GIMP included in Red Hat Enterprise Linux 6. The issue is due to improper calculation of buffer sizes for low bit-depth images, which results in overwriting adjacent memory on the heap. Exploitation requires a user to open a maliciously crafted PSP image file, potentially allowing arbitrary code execution or denial of service. The CVSS 3.1 base score is 7.3, indicating high severity with local attack vector, low complexity, low privileges required, and user interaction needed.
Potential Impact
Successful exploitation can lead to arbitrary code execution or denial of service on affected systems. The attack requires local access with the ability to trick a user into opening a crafted PSP image file, which could compromise confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58379 for current remediation guidance. No official fix or workaround details are provided in the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-30T16:54:04.312Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-58379","vendor":"Red Hat"}]
Threat ID: 6a4804bd27e9c7971934932a
Added to database: 07/03/2026, 18:51:41 UTC
Last enriched: 07/03/2026, 19:06:18 UTC
Last updated: 07/03/2026, 19:11:10 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.