CVE-2026-6384

DOCUMENTATION: A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's ReadJeffsImage function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution. 

            STATEMENT: Important: This flaw in GIMP's GIF image processing component allows an attacker to trigger a buffer overflow by providing a specially crafted GIF file. This could lead to a denial of service or arbitrary code execution. Exploitation requires user interaction to open a malicious GIF file.

            MITIGATION: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.