Status: UPDATED
| Advisory ID: CVE-2026-6384
Key Details
| CVE | CVE-2026-6384 |
| CVSS Score / Version | 7.3 (High) / CVSS v3.1 |
| Updated | 2026-09-30 |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H |
| CVSS Prose | attack vector is local; attack complexity is low; privileges required is low; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high. |
| Affected products | Red Hat Enterprise Linux, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 6, and gimp gimp |
| Classified as | CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')) |
Affected Products, Subsystems & Sectors
| Subsystems | OT Supporting Infrastructure |
| Sectors | All Sectors |
What to Know
A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution. (NVD)
What to Do
Monitor Red Hat's and gimp's web pages for any future patch releases. See vendor advisory link below.
References