The vulnerability of the fread_pascal_string() function in the plug-ins/file-psd/psd-util.c file of the Gimp image processing library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the freadpascalstring function in the plug-ins/file-psd/psd-util.c file of the Gimp image processing library is related to errors that occur when a string or array is terminated with the null character. Exploiting this vulnerability could allow an attacker to cause service...

CVE-2026-2239: Improper Null Termination

A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the freadpascalstring function when processing a specially crafted PSD Photoshop Document file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an out-of-bounds read whe...