CVE-2026-59091

HIGH

Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-59091 has a selected CVSS score of 7.3 (high).

Description

A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. A remote attacker could exploit these vulnerabilities by tricking a user into opening a specially crafted image file. This could lead to unexpected application behavior or other potential security impacts without requiring further user interaction.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 11, 2026 · Source: CVE List

Affected products and versions

4
ProductSourceVersion range

Red Hat Enterprise Linux 6

Browse Red Hat / Red Hat Enterprise Linux 6gimp

Default status: unknown

CVE ListVersion data not supplied

Red Hat Enterprise Linux 7

Browse Red Hat / Red Hat Enterprise Linux 7gimp

Default status: affected

CVE ListVersion data not supplied

Red Hat Enterprise Linux 8

Browse Red Hat / Red Hat Enterprise Linux 8gimp

Default status: affected

CVE ListVersion data not supplied

Red Hat Enterprise Linux 9

Browse Red Hat / Red Hat Enterprise Linux 9gimp

Default status: affected

CVE ListVersion data not supplied

References

4