Description
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
Affected products
gimp: gimp; redhat: enterprise linux
References8
- access.redhat.com/security/cve/CVE-2026-59090 Vendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2496584 Issue TrackingVendor Advisory
- gitlab.gnome.org/GNOME/gimp/-/work_items/16509 ExploitMitigationVendor Advisory
- gitlab.gnome.org/GNOME/gimp/-/work_items/16509 ExploitMitigationVendor Advisory
- access.redhat.com/errata/RHSA-2026:61587
- access.redhat.com/errata/RHSA-2026:73768
- access.redhat.com/errata/RHSA-2026:80509
- access.redhat.com/errata/RHSA-2026:93589
Metrics
- CVSS 3.1
-
9.9
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - EPSS — exploit probability
- 1% percentile: 56 · as of 12 November 2026
- CWE
- CWE-191
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.