Homepage

Off-by-one Error The advisory has been revoked - it doesn't affect any version of package gimp:2.8/python2-pycairo  (opens in a new tab)

Threat Intelligence

EPSS
0.26% (16th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL8-GIMP-17880000
  • published7 Jul 2026
  • disclosed11 Apr 2026
Report a new vulnerability Found a mistake?

Introduced: 11 Apr 2026

CVE-2026-58380  (opens in a new tab)
CWE-193  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gimp:2.8/python2-pycairo package and not the gimp:2.8/python2-pycairo package as distributed by RHEL.

A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of a stack-allocated buffer due to an off-by-one error in the loop boundary check. This could lead to memory corruption, potentially resulting in denial of service or arbitrary code execution.