CVE-2026-59091: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 6
CVE-2026-59091 is a high-severity vulnerability in GIMP's file format plugins for PSD and PAA files on Red Hat Enterprise Linux 6. It allows a local attacker with low privileges to cause out-of-bounds writes by tricking a user into opening a specially crafted image file. This can lead to information disclosure, arbitrary code execution, or denial of service due to memory corruption. Exploitation requires user interaction but no further privileges beyond low-level access. Red Hat has not yet provided an official fix or patch for this vulnerability. Users are advised to avoid opening untrusted PSD or PAA image files with GIMP to mitigate risk.
AI Analysis
Technical Summary
This vulnerability involves an out-of-bounds write flaw (CWE-787) in GIMP's PSD and PAA file format plugins on Red Hat Enterprise Linux 6. A local attacker with low privileges can exploit this by convincing a user to open a maliciously crafted image file, causing memory corruption that may lead to arbitrary code execution, information disclosure, or application crashes. The attack vector requires local access and user interaction. Red Hat's advisory confirms the vulnerability but does not currently specify a remediation or patch. The CVSS v3.1 base score is 7.3, reflecting high confidentiality, integrity, and availability impacts.
Potential Impact
Successful exploitation can result in high impact including unauthorized code execution, disclosure of sensitive information, and denial of service through application crashes. The vulnerability requires local access and user interaction but can lead to significant system compromise or data exposure if exploited.
Mitigation Recommendations
Red Hat has not yet released an official fix or patch for this vulnerability. Users should mitigate risk by avoiding opening untrusted or suspicious PSD and PAA image files with GIMP. Exercising caution with image files from unknown sources is recommended until a patch is available. Monitor Red Hat's advisory page for updates on remediation.
CVE-2026-59091: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 6
Description
CVE-2026-59091 is a high-severity vulnerability in GIMP's file format plugins for PSD and PAA files on Red Hat Enterprise Linux 6. It allows a local attacker with low privileges to cause out-of-bounds writes by tricking a user into opening a specially crafted image file. This can lead to information disclosure, arbitrary code execution, or denial of service due to memory corruption. Exploitation requires user interaction but no further privileges beyond low-level access. Red Hat has not yet provided an official fix or patch for this vulnerability. Users are advised to avoid opening untrusted PSD or PAA image files with GIMP to mitigate risk.
CVSS v3.1
Score 7.3high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an out-of-bounds write flaw (CWE-787) in GIMP's PSD and PAA file format plugins on Red Hat Enterprise Linux 6. A local attacker with low privileges can exploit this by convincing a user to open a maliciously crafted image file, causing memory corruption that may lead to arbitrary code execution, information disclosure, or application crashes. The attack vector requires local access and user interaction. Red Hat's advisory confirms the vulnerability but does not currently specify a remediation or patch. The CVSS v3.1 base score is 7.3, reflecting high confidentiality, integrity, and availability impacts.
Potential Impact
Successful exploitation can result in high impact including unauthorized code execution, disclosure of sensitive information, and denial of service through application crashes. The vulnerability requires local access and user interaction but can lead to significant system compromise or data exposure if exploited.
Mitigation Recommendations
Red Hat has not yet released an official fix or patch for this vulnerability. Users should mitigate risk by avoiding opening untrusted or suspicious PSD and PAA image files with GIMP. Exercising caution with image files from unknown sources is recommended until a patch is available. Monitor Red Hat's advisory page for updates on remediation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-02T15:11:12.821Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-59091","vendor":"Red Hat"}]
Threat ID: 6a7a1efbbf8831d5395b0eb2
Added to database: 08/10/2026, 18:56:59 UTC
Last enriched: 08/10/2026, 19:11:19 UTC
Last updated: 08/10/2026, 19:11:19 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.