High severity8.4NVD Advisory· Published Aug 10, 2026· Updated Aug 31, 2026
CVE-2026-59090
CVE-2026-59090
Description
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the block_rem variable, occurs when a user opens a specially crafted .psd image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords3 versions
< 3.2.4-4.1+ 2 more
- (no CPE)range: < 3.2.4-4.1
- (no CPE)range: < 2:3.0.4-4.el9_8.10
- (no CPE)range: < 2:3.0.4-4.el9_8.10
Patches
Vulnerability mechanics
References
3- access.redhat.com/security/cve/CVE-2026-59090nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2026:61587nvd
News mentions
0No linked articles in our index yet.