CVE-2026-59091

Katalog CVE

CVSS 7.8 · High EPSS 0,40%

Kerentanan Out-of-bounds Write pada gimp, redhat enterprise linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts without requiring further user interaction.

Rincian

Terbit di NVD

10 Agustus 2026

Terakhir diubah

24 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-59091 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2496585 issue tracking · advisory vendor
• https://gitlab.gnome.org/GNOME/gimp/-/work_items/16510 exploit · mitigasi · advisory vendor