Threats Tagged 'cve-2026-58380'

These are all security issues fixed in the gimp-3.2.6-1.1 package on the GA media of openSUSE Tumbleweed.

A stack buffer overflow vulnerability exists in GIMP's PNM file format parser due to an off-by-one error in the pnmscanner_gettoken() function. This flaw can cause memory corruption when processing specially crafted PNM files, potentially leading to denial of service or arbitrary code execution. Red Hat has issued a security update addressing this issue in GIMP for Red Hat Enterprise Linux 9.

This security update for GIMP addresses three vulnerabilities: a heap buffer overflow in PSP file parsing (CVE-2026-58379), a buffer overflow in pnmscanner_gettoken (CVE-2026-58380), and a double-free issue with PSP layer names (CVE-2026-58381). These issues could lead to memory corruption and potential instability or exploitation. The update fixes these vulnerabilities to improve the security and stability of GIMP.

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.