CVE-2026-58381
published 2026-07-02CVE-2026-58381: A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP…
PriorityP341high7.3CVSS 3.1
AVLACLPRLUIRSUCHIHAH
EPSS
0.29%
20.4th percentile
A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gimp | gimp | <= 3.2.1 | — |
| gimp | gimp | — | — |
| gimp_2.8 | gimp | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Red Hat Enterprise Linux 6/7/8/9 PSP File read_layer_block double free (ID 16207)
vuldb·2026-07-02·CVSS 6.1
CVE-2026-58381 [MEDIUM] Red Hat Enterprise Linux 6/7/8/9 PSP File read_layer_block double free (ID 16207)
A vulnerability was found in Red Hat Enterprise Linux 6/7/8/9 and classified as problematic. This affects the function read_layer_block of the component PSP File Handler. Executing a manipulation can lead to double free.
This vulnerability appears as CVE-2026-58381. The attack requires local access. There is no available exploit.
It is advisable to implement a patch to correct this issue.
GHSA
A flaw was found in GIMP's PSP file format parser.
ghsa_unreviewed·2026-07-02
CVE-2026-58381 [MEDIUM] CWE-415 A flaw was found in GIMP's PSP file format parser.
A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.
Red Hat
gimp: gimp: Double-free in read_layer_block()
vendor_redhat·2026-04-11·CVSS 6.1
CVE-2026-58381 [MEDIUM] CWE-415 gimp: gimp: Double-free in read_layer_block()
gimp: gimp: Double-free in read_layer_block()
A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.
Statement: This flaw is rated as Moderate. A double-free vulnerability within GIMP's Paint Shop Pro (PSP) file format parser can lead to memory corruption, potentially resulting in denial of service or arbitrary code execution. Successful exploitation requires a local attacker to persuade a user to open a specially crafted PSP file using GIMP.
Mitigation: None — requires opening a crafted PSP file.
Package: gimp (Red Hat Enterprise Linux 6) - Out of suppor
No detection rules found.
No public exploits indexed.
2026-07-02
Published