CVE-2026-119528High· 7.8▾ TwilightA flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overf…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution.
gimp (all versions)gimpgimp (all versions)gimp:2.8/gimp (all versions)gimp (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Do not open untrusted PSD files in GIMP. Avoid browsing directories containing untrusted PSD files in GIMP’s file dialog if thumbnail/preview loading may parse PSD resources. If GIMP is not required, remove the gimp package.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-48796High· 7.3A flaw was found in GIMP
CVE-2026-2239Low· 2.8Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow
CVE-2026-79902Medium· 5.5Gimp: stack vla size underflow denial of service in seattle
CVE-2026-80101Medium· 4.4Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
CVE-2026-82343Medium· 6.1Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling
CVE-2026-82324Medium· 6.1Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0