CVE-2026-90949

A flaw was found in GIMP's PSP (Paint Shop Pro) file loader. When processing a compressed selection channel, a heap-based buffer overflow can occur due to a mismatch between the allocated buffer size and the amount of data decompressed. A remote attacker could exploit this vulnerability by crafting a malicious PSP file. Opening this file in GIMP could lead to a crash or arbitrary code execution.

This vulnerability is rated as an Important impact for Red Hat Enterprise Linux because opening a maliciously crafted image can result in arbitrary code execution with the permissions of the logged-in user, rather than a higher severity due to the requirement for user interaction. GIMP is an optional desktop application that is not deployed or enabled by default on standard enterprise server installations. Systems that do not process untrusted Paint Shop Pro files or run the application in unattended workflows are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.