CVE-2026-59090
published 2026-08-10CVE-2026-59090: A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a…
PriorityP264critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.65%
50.6th percentile
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gimp | gimp | — | — |
| gimp | gimp | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
GIMP PSD plugin data authenticity (Nessus ID 339756)
vuldb·2026-08-26·CVSS 9.9
CVE-2026-59090 [CRITICAL] GIMP PSD plugin data authenticity (Nessus ID 339756)
A vulnerability, which was classified as critical, was found in GIMP. This issue affects some unknown processing of the component PSD plugin. Executing a manipulation can lead to insufficient verification of data authenticity.
The identification of this vulnerability is CVE-2026-59090. The attack may be launched remotely. There is no exploit available.
GHSA
A flaw was found in GIMP's PSD file format plugin.
ghsa_unreviewed·2026-08-10
CVE-2026-59090 [HIGH] CWE-191 A flaw was found in GIMP's PSD file format plugin.
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
Red Hat
gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
vendor_redhat·2026-06-15·CVSS 8.4
CVE-2026-59090 [HIGH] CWE-191 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
Statement: This is an Important severity flaw in the GIMP image manipulation program. An unsigned integer underflow in the PSD plugin can lead to arbitrary code execution when a user opens a specially crafted `.psd` file. This vulnerability primarily affects desktop environments where GIMP
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-59090 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow [fedora-all]
bugzilla·2026-08-10·CVSS 8.4
CVE-2026-59090 [HIGH] CVE-2026-59090 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow [fedora-all]
CVE-2026-59090 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A source-level audit of GIMP's file format plugins identified 2 vulnerabilities in default-install plugins (file-psd, file-paa). Both are triggerable by opening a crafted image file — no user interaction beyond "File > Open" is required. Each finding has been independently reproduced with a standalone PoC and confirmed via AddressSanitizer or arithmetic verification in a Docker environment (Fedora 41, gcc, zlib-devel).
https://gitlab.gnome.org/GNOME/gimp/-/work_it
Bugzilla
CVE-2026-59090 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
bugzilla·2026-07-02·CVSS 8.4
CVE-2026-59090 [HIGH] CVE-2026-59090 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
CVE-2026-59090 gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
A source-level audit of GIMP's file format plugins identified 2 vulnerabilities in default-install plugins (file-psd, file-paa). Both are triggerable by opening a crafted image file — no user interaction beyond "File > Open" is required. Each finding has been independently reproduced with a standalone PoC and confirmed via AddressSanitizer or arithmetic verification in a Docker environment (Fedora 41, gcc, zlib-devel).
https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509
https://access.redhat.com/errata/RHSA-2026:61587https://access.redhat.com/errata/RHSA-2026:73768https://access.redhat.com/errata/RHSA-2026:80509https://access.redhat.com/security/cve/CVE-2026-59090https://bugzilla.redhat.com/show_bug.cgi?id=2496584https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509https://gitlab.gnome.org/GNOME/gimp/-/work_items/16509
2026-08-10
Published