CVE-2026-82343EPSS p16.8%
CVE-2026-82343CVE-2026-82343
gimp / gimp
Description
A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack out-of-bounds access. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of memory contents.
Scoring
| CVSS | 6.1 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H |
| EPSS | 0.26% probability of exploitation · percentile 16.8% · 2026-10-06T12:00:23Z |
| Last modified | 2026-09-01 |