Threats Tagged 'cve-2026-82343'

A vulnerability in the file-psd plugin of GIMP allows improper validation of the channel-count parameter when processing specially crafted PSD image files. This leads to heap out-of-bounds reads and stack out-of-bounds accesses, potentially causing application crashes (denial of service) or limited disclosure of memory contents. Exploitation requires convincing a user to open a malicious PSD file, which reduces the likelihood of exploitation. The issue is rated with moderate severity and no known exploits in the wild have been reported.

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack out-of-bounds access. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of memory contents.