Executive brief
GIMP is a widely-used open-source image editor. A flaw in its PSD (Photoshop) file import plugin allows an attacker to craft a malicious image file that crashes the application when opened, causing denial of service. The vulnerability could also leak small amounts of sensitive memory contents from the affected user's system.
Technical details
The file-psd plugin in GIMP fails to properly validate the channel-count parameter when parsing specially crafted PSD image files. This insufficient validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack out-of-bounds access. An attacker can exploit this by distributing a malicious PSD file; when a user opens it in GIMP, the plugin will crash or leak memory contents. The vulnerability requires user interaction (opening a malicious file) and is network-reachable if files are downloaded or received via email. A patch should be available from GIMP maintainers.
Affected products
- GIMP GIMP <UNKNOWN>
Timeline
- 2026-08-28: disclosed