CVE-2026-59090: Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a specially crafted .psd image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
Other sources
A source-level audit of GIMP's file format plugins identified 2 vulnerabilities in default-install plugins (file-psd, file-paa). Both are triggerable by opening a crafted image file — no user interaction beyond "File > Open" is required. Each finding has been independently reproduced with a standalone PoC and confirmed via AddressSanitizer or arithmetic verification in a Docker environment (Fedora 41, gcc, zlib-devel).
https://gitlab.gnome.org/GNOME/gimp/-/workitems/16509
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gimpto a version that resolves this vulnerability.Fixed in 3.0.4-3+deb13u10 - Upgrade
Upgrade
debian/gimpto a version that resolves this vulnerability.Fixed in 3.2.6-1 - Upgrade
Upgrade
debian/gimpto a version that resolves this vulnerability.Fixed in 3.0.4-3+deb13u10Fixed in 3.0.4-3+deb13u11Fixed in 3.2.8-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59090?
CVE-2026-59090 has a severity rating of 8.4, which is considered high.
How does CVE-2026-59090 affect GIMP users?
CVE-2026-59090 allows attackers to execute arbitrary code on GIMP users' systems by exploiting a vulnerability in the PSD file format plugin.
How do I fix CVE-2026-59090?
To fix CVE-2026-59090, update GIMP to the latest version that includes the security patch addressing this vulnerability.
What causes CVE-2026-59090?
CVE-2026-59090 is caused by an unsigned integer underflow in the `block_rem` variable when processing specially crafted PSD image files.
What type of vulnerability is CVE-2026-59090 classified as?
CVE-2026-59090 is classified as an integer underflow vulnerability.