CVE-2026-2239

Description

A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the fread_pascal_string function when processing a specially crafted PSD (Photoshop Document) file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an out-of-bounds read when strlen() is subsequently called. Successfully exploiting this vulnerability can cause the application to crash, resulting in an application level Denial of Service.

Risk Information

Base Score

2.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

EPSS Score

Exploitation Probability

0.0

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2026-2239 are affected in GIMP 3.2.0-rc3	Windows
Vulnerabilities CVE-2026-2239,CVE-2026-4887 are affected in GIMP 3.2.0-rc3	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234