CVE-2026-6384

Summary

A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's ReadJeffsImage function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.

Affected Software

Weaknesses

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Workarounds

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

gimp: GIMP: Arbitrary code execution or denial of service via buffer overflow in GIF image processing

Additional References

• https://access.redhat.com/security/cve/CVE-2026-6384
• https://bugzilla.redhat.com/show_bug.cgi?id=2458749
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6384.json

References

• https://access.redhat.com/security/cve/CVE-2026-6384
• https://bugzilla.redhat.com/show_bug.cgi?id=2458749

• ←Previous
• Next→