---
id: CVE-2026-59089
title: 'Gimp: gimp: denial of service via integer overflow in playstation tim loader'
summary: >-
  A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling
  PlayStation image files, incorrectly calculates the size of the Color Look-Up
  Table (CLUT) due to an integer overflow. This occurs when multiplying
  num_colors…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-190
vendor: Red Hat
product: gimp
affected:
  - gimp 3.2.6
  - gimp
  - gimp
  - gimp (all versions)
  - gimp (all versions)
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-07-06T19:48:49.016983Z'
exploitAvailable: true
published: '2026-07-06'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T22:18:04.486Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-59089'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-59089'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2496583'
    label: RHBZ#2496583
  - url: 'https://gitlab.gnome.org/GNOME/gimp/-/work_items/16493'
tags:
  - cve.org
  - exploit-available
epss: 0.00296
epssPercentile: 0.2241
ingestedAt: '2026-11-05T23:41:31.947Z'
---

## Overview

A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table (CLUT) due to an integer overflow. This occurs when multiplying num_colors and num_cluts, both 16-bit unsigned short integers, resulting in a value exceeding the maximum integer limit. An attacker could exploit this by providing a specially crafted image file, leading to undefined behavior and causing the GIMP plug-in to abort, effectively resulting in a denial of service.

## Affected

- `gimp 3.2.6`
- `gimp`
- `gimp`
- `gimp (all versions)`
- `gimp (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.