CVE-2026-58380 is a vulnerability in the GIMP image manipulation program included in Red Hat Enterprise Linux 9. The flaw is an off-by-one error in the pnmscanner_gettoken() function of the PNM file parser, where a null terminator is written one byte beyond the allocated stack buffer boundary. This causes a stack buffer overflow, potentially leading to memory corruption that can be exploited for denial of service or arbitrary code execution. Red Hat has issued an important security advisory and released patched GIMP packages (version 3.0.4-4.el9_8.7) to fix this issue.

Successful exploitation of this vulnerability can cause memory corruption, which may lead to denial of service or allow an attacker to execute arbitrary code with the privileges of the user running GIMP. The CVSS 3.1 base score of 7.3 reflects high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.

Red Hat has released a security update for GIMP in Red Hat Enterprise Linux 9 that fixes this vulnerability. Users should apply the update to GIMP version 3.0.4-4.el9_8.7 or later as provided in the Red Hat advisory RHSA-2026:40751. Refer to Red Hat's official update instructions at https://access.redhat.com/articles/11258 for applying the patch. No additional mitigation steps are required beyond applying the official update.