Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an out-of-bounds read when strlen() is subsequently called. Successfully exploiting this vulnerability can cause the application to crash, resulting in an application level Denial of Service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-01 | 1 | Patch1 |
| 2026-03-06 | 1 | General1 |
| 2026-03-26 | 1 | Disclosure1 |
CVE-2026-2239 A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) fil… https://www.cve.org/CVERecord?id=CVE-2026-2239
Post summary
A heap‑buffer‑overflow vulnerability was disclosed in GIMP’s fread_pascal_string function when parsing specially crafted Photoshop Document files.
CVE-2026-2239 GIMP https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2239 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet merely names CVE-2026-2239 for GIMP and links to a vulnerability detail page, offering no substantive information beyond the identifier.
Critical security advisory for #Fedora 43: GIMP 3.0.8-5 fixes CVE-2026-2239, a heap-buffer-overflow in the PSD loader. This is a DoS vector using crafted PSDs. Read more: 👉 https://tinyurl.com/2tks99p8 #Security https://t.co/ajwNQUnT4D
Post summary
The advisory announces that Fedora 43’s GIMP 3.0.8-5 patch resolves CVE-2026-2239, a heap‑buffer‑overflow in the PSD loader that could lead to denial‑of‑service via crafted PSD files.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gimp | gimp | 3.2.0 | - | - |
| OS | redhat | enterprise_linux | 7.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |