CVE-2026-58384

7.8 Élevée

Publiée le 07/07/2026 à 11:16 · Modifiée le 12/10/2026 à 05:17 · Analyse NVD en cours · Source : secalert@redhat.com

Description

A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-row writes corrupt heap memory. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.

Traduire en français

Produits concernés

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.3 Élevée	secalert@redhat.com	`CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H`
3.1	7.8 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-190

Références

https://access.redhat.com/errata/RHSA-2026:40751
https://access.redhat.com/errata/RHSA-2026:73768
https://access.redhat.com/errata/RHSA-2026:80509
https://access.redhat.com/security/cve/CVE-2026-58384 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2497431 Issue TrackingThird Party Advisory
https://gitlab.gnome.org/GNOME/gimp/-/commit/da29e217 Broken Link
https://gitlab.gnome.org/GNOME/gimp/-/issues/16216 ExploitIssue TrackingVendor Advisory

CVE-2026-58384

Description

Produits concernés

Scores CVSS

Faiblesses (CWE)

Références

Ailleurs