CVE-2026-58384 describes an integer overflow in the read_RLE_channel() function of GIMP's PSD parser on Red Hat Enterprise Linux 6. The overflow causes an undersized heap allocation for the RLE row-length table, which leads to heap memory corruption during subsequent writes. This vulnerability can be exploited to cause denial of service or arbitrary code execution. The CVSS 3.1 base score is 7.3, indicating a high severity with local attack vector, low complexity, low privileges required, and user interaction needed. No official remediation or patch information is provided in the vendor advisory at this time.

Successful exploitation can lead to memory corruption resulting in denial of service or arbitrary code execution on affected systems running Red Hat Enterprise Linux 6 with the vulnerable GIMP PSD parser. The vulnerability requires local access with low privileges and user interaction, but can have high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58384 for current remediation guidance. Until a patch is available, limit exposure by restricting access to vulnerable components and avoid opening untrusted PSD files with GIMP on affected systems.