A heap out-of-bounds read/write vulnerability exists in the PSD thumbnail loader component of GIMP (GNU Image Manipulation Program), identified as CVE-2026-112257. This flaw affects multiple versions of GIMP prior to the fixed releases. The vulnerability could lead to memory corruption during processing of PSD thumbnails. An update addressing this issue is available and has been released by Red Hat for affected versions.