Description
A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.
Published: 2026-10-19
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Potential Local Code Execution
Action: Implement Workaround
AI Analysis

Impact

GIMP’s PSD thumbnail loader performs a BGR-to-RGB channel swap without validating that the thumbnail data is RGB. A crafted grayscale thumbnail can trigger a heap out‑of‑bounds read and write, causing a crash and potentially enabling arbitrary code execution when the file is opened or browsed. The flaw is a classic memory corruption defect, classified under CWE-121.

Affected Systems

Red Hat Enterprise Linux 10 through 9, all releases that include the GIMP package, are affected. Users of these operating systems should be aware that any installation of GIMP presents the vulnerability.

Risk and Exploitability

The CVSS score is 7.8, indicating a high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local: an attacker who can supply or trick a user into opening a malicious PSD file can exploit the flaw. Without an available patch, the risk remains until Red Hat releases a fix.

Generated by OpenCVE AI on October 20, 2026 at 06:28 UTC.

Remediation

Vendor Workaround

Avoid opening or browsing untrusted PSD files in GIMP. If GIMP is unused, remove the gimp package.

OpenCVE Recommended Actions

  • Remove the GIMP package if the application is not required for your environment.
  • Avoid opening or browsing untrusted PSD files in GIMP; restrict file handling to trusted sources only.
  • Monitor Red Hat security advisories and apply any future GIMP updates when they become available.

Generated by OpenCVE AI on October 20, 2026 at 06:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 05 Nov 2026 10:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:8::appstream
References

Wed, 04 Nov 2026 22:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8		 cpe:/a:redhat:enterprise_linux:10
cpe:/a:redhat:enterprise_linux:8
cpe:/o:redhat:rhel_els:6
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els

Mon, 02 Nov 2026 18:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
References

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Gimp
Gimp gimp
Vendors & Products Gimp
Gimp gimp

Tue, 20 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Mon, 19 Oct 2026 21:45:00 +0000

Type Values Removed Values Added
Description A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.
Title Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033)
First Time appeared Redhat
Redhat enterprise Linux
Weaknesses CWE-121
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Gimp Gimp
Redhat Enterprise Linux Rhel Els
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-11-05T10:02:03.812Z

Reserved: 2026-10-19T13:14:33.431Z

Link: CVE-2026-112257

cve-icon Vulnrichment

Updated: 2026-10-20T14:47:22.067Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-19T22:17:05.420

Modified: 2026-11-05T10:16:36.970

Link: CVE-2026-112257

cve-icon Redhat

Severity : Important

Publid Date: 2026-10-12T00:00:00Z

Links: CVE-2026-112257 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-21T16:47:16Z

Weaknesses
  • CWE-121

    Stack-based Buffer Overflow