CVE-2026-119528

HIGH

MEDIUM Priority: 0.01 BB Relevance: 41/100

Published: 2026-10-30 Modified: 2026-10-31 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local

AC: Low

PR: None

UI: Required

S: Unchanged

C: High

I: High

A: High

Description

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution.