CVE-2026-58381

A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the read_layer_block() function when processing a specially crafted PSP file. This could allow an attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution.

This flaw is rated as Moderate. A double-free vulnerability within GIMP's Paint Shop Pro (PSP) file format parser can lead to memory corruption, potentially resulting in denial of service or arbitrary code execution. Successful exploitation requires a local attacker to persuade a user to open a specially crafted PSP file using GIMP.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

None — requires opening a crafted PSP file.