CVE-2026-92248

Awaiting Analysis Awaiting Analysis - Queue

Integer Overflow Leading to Heap Buffer Overflow in GIMP's PSD Plugin

Publication date: 2026-09-15

Last updated on: 2026-10-05

Assigner: redhat-SADP

Description

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD (Photoshop Document) image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a heap-based buffer overflow when the image data is decoded. This buffer overflow corrupts adjacent heap objects, allowing for a controlled memory write that can result in an application crash or arbitrary code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-10-05

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-05

NVD

CVE-2026-92248

EUVD

EUVD-2026-80049

Affected Vendors & Products

Vendor	Product	Version / Range
gnome	gimp	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in GIMP's file-psd plugin. It occurs when processing a maliciously crafted PSD image file. An integer overflow during thumbnail generation causes an undersized heap allocation, leading to buffer overflow when decoding image data. This can corrupt heap memory and potentially allow arbitrary code execution or application crashes.

Detection Guidance

This vulnerability is specific to GIMP's file-psd plugin and requires examining PSD files for malicious JPEG headers. No direct network detection commands are provided. Inspect GIMP installations for the vulnerable plugin and monitor for crashes when processing PSD files.

Impact Analysis

If you open a specially crafted PSD file in GIMP, this flaw could crash the application or allow an attacker to execute malicious code on your system. This could lead to data theft, system compromise, or further attacks depending on user privileges.

Compliance Impact

This vulnerability primarily affects application stability and security by enabling arbitrary code execution through heap-based buffer overflows. It does not directly impact compliance with GDPR, HIPAA, or similar standards unless exploited to access or manipulate sensitive data, which could then lead to violations depending on context and mitigations.

Mitigation Strategies

Disable or remove the file-psd plugin in GIMP. Avoid opening untrusted PSD files. Update GIMP to the latest patched version if available. Monitor for application crashes or unusual memory usage when processing images.

Hi! I’m here to help you understand CVE-2026-92248. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70