Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 GIMP 中发现一个缺陷。PSD 插件的图像资源标头加载程序在将转换后的资源名称复制到固定堆栈缓冲区时使用不正确的目标大小。打开构建的 PSD 文件可导致基于堆栈的缓冲区溢出，从而导致崩溃并可能导致任意代码执行。
    (CVE-2026-119528)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - GIMP に欠陥が見つかりました。PSD プラグインのイメージリソースヘッダーローダーは、変換されたリソース名を固定スタックバッファにコピーする際に、正しくない宛先サイズを使用します。細工された PSD ファイルを開くと、スタックベースのバッファオーバーフローが発生し、クラッシュや任意のコードの実行につながる可能性があります。
    (CVE-2026-119528)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 GIMP 中發現一個缺陷。PSD 外掛程式的影像資源標頭載入器在將轉換後的資源名稱複製到固定堆疊緩衝區時，使用不正確的目的地大小。開啟特製的 PSD 檔案可能會導致堆疊型緩衝區溢位，從而導致崩潰並可能執行任意程式碼。
    (CVE-2026-119528)

請注意，Nessus 依賴供應商報告的套件存在。

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-022 advisory.

    A flaw was found in GIMP's X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted     XMC file, it allocates a pixel buffer using a width * height size computed in 32-bit signed arithmetic. If     that product overflows, the allocation is smaller than the true image extent. A subsequent GEGL buffer     read uses the unwrapped dimensions and performs an out-of-bounds read on the heap (CWE-125), after integer     overflow in the size calculation (CWE-190). This can crash GIMP or corrupt process memory.
    (CVE-2026-106061)

    A heap-based buffer overflow was found in GIMP's DICOM export plug-in. When exporting an image with     extremely large width and height, the export path allocates a buffer using a 32-bit width * height (and     bytes-per-pixel) product that can overflow. GEGL then writes the full uncompressed extent into the     undersized buffer (CWE-787), after integer overflow in the allocation size (CVE-2026-106063)

    A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a     fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail     can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially     arbitrary code execution when the victim browses or opens the file. (CVE-2026-112257)

    A flaw was found in GIMP. The PSD plug-in's image resource header loader uses an incorrect destination     size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can     cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution.
    (CVE-2026-119528)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in GIMP. The PSD plug-in's image resource header loader uses an incorrect destination     size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can     cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution.
    (CVE-2026-119528)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:98532 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: gimp: stack buffer overflow in PSD image resource header loader (CVE-2026-119528)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:99154 advisory.

    The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a     large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and     anti-aliasing, and conversions, all with multi-level undo.

    Security Fix(es):

    * gimp: gimp: stack buffer overflow in PSD image resource header loader (CVE-2026-119528)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:98532 advisory.

    * gimp: gimp: stack buffer overflow in PSD image resource header loader (CVE-2026-119528)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
374308	Linux Distros 未修补的漏洞：CVE-2026-119528	Nessus	Misc.	2026/10/30	2026/10/31	high
374308	Linux Distros のパッチ未適用の脆弱性: CVE-2026-119528	Nessus	Misc.	2026/10/30	2026/10/31	high
374308	Linux Distros 未修補弱點：CVE-2026-119528	Nessus	Misc.	2026/10/30	2026/10/31	high
377896	Amazon Linux 2 : gimp (ALASGIMP-2026-022)	Nessus	Amazon Linux Local Security Checks	2026/11/9	2026/11/9	high
374308	Linux Distros Unpatched Vulnerability : CVE-2026-119528	Nessus	Misc.	2026/10/30	2026/10/31	high
378883	RHEL 9 : gimp (RHSA-2026:98532)	Nessus	Red Hat Local Security Checks	2026/11/11	2026/11/11	high
379514	RHEL 9 : gimp (RHSA-2026:99154)	Nessus	Red Hat Local Security Checks	2026/11/12	2026/11/12	high
380212	RockyLinux 9 : gimp (RLSA-2026:98532)	Nessus	Rocky Linux Local Security Checks	2026/11/13	2026/11/13	high

検出

プラグインの検索

high

high

high

high

high

high

high

high