CVE-2026-82343

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack out-of-bounds access. This issue can result in an application crash, leading to a denial of service or a limited information disclosure of memory contents.

• CWE-120

• https://access.redhat.com/security/cve/CVE-2026-82343Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2525644Issue Tracking, Vendor Advisory
• https://gitlab.gnome.org/GNOME/gimp/-/work_items/16587Issue Tracking, Mitigation, Vendor Advisory

Published

Aug 28, 2026

Last Modified

Sep 1, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82331Improper link resolution before file access ('link following…9.8
• CVE-2026-82333multer is a middleware for handling multipart/form-data in N…7.5
• CVE-2026-82334IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable …9.1
• CVE-2026-82335IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable …9.8
• CVE-2026-8234A security vulnerability has been detected in EFM ipTIME A80…8.8
• CVE-2026-82340IBM Guardium Data Protection 12.2 is vulnerable to unauthent…9.8
• CVE-2026-82344IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a h…9.8
• CVE-2026-82346A potential security vulnerability has been identified in th…7
• CVE-2026-82348Authorization Bypass Through User-Controlled Key in Apache R…7.7
• CVE-2026-8235A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0…5.5
• CVE-2026-82355When a request to the Airflow core API carries both a sessio…4.2
• CVE-2026-82356Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA k…7.5