← CVE Intelligence

CVE-2026-6384

Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing PUBLISHED

Description (CNA)

A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7unaffected
Red Hat / Red Hat Enterprise Linux 8unaffected
Red Hat / Red Hat Enterprise Linux 9unaffected

CWE

CWE-120

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.