Threats tagged 'ghsa-rx3j-28q8-xw3m'

A heap buffer overflow vulnerability exists in GIMP's Paint Shop Pro (PSP) file format parser due to incorrect buffer size calculations when processing low bit-depth images. This flaw allows a remote attacker to cause arbitrary code execution or denial of service by tricking a user into opening a specially crafted PSP image file. The issue is tracked as CVE-2026-58379 with a CVSS score of 7.3 (high severity). Red Hat has released security updates addressing this vulnerability in GIMP packages for Red Hat Enterprise Linux 9.