CVE-2026-58384 - Gimp: gimp: integer overflow in read_rle_channel()
Posted: Tue Jul 07, 2026 3:08 pm
CVE ID: CVE-2026-58384
Published: July 7, 2026
Description: A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Severity: 7.3 | HIGH
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-58384
Published: July 7, 2026
Description: A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.
Severity: 7.3 | HIGH
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-58384