This vulnerability involves an integer overflow or wraparound in the GIMP PSP file parser component of Red Hat Enterprise Linux 6. Specifically, the read_creator_block() function improperly handles a 32-bit length value from a PSP image file, leading to unsafe memory allocation. This results in a heap overflow and out-of-bounds write, which can be exploited by a local attacker providing a crafted PSP file to cause an application-level denial of service. The CVSS 3.1 base score is 3.3, reflecting low severity with local attack vector, low complexity, no privileges required, and user interaction needed.

Successful exploitation of this vulnerability can cause an application-level denial of service due to heap overflow and out-of-bounds memory writes. There is no indication of confidentiality or integrity impact. The attack requires local access and user interaction, limiting the scope and ease of exploitation.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-2271 for current remediation guidance. No explicit patch or workaround information is provided in the available data. Until a patch is confirmed, avoid processing untrusted PSP image files with the affected GIMP parser to mitigate risk.