This vulnerability involves an integer overflow in the FITS image loader of GIMP on Red Hat Enterprise Linux 6. The overflow results in a zero-byte memory allocation, which is then subject to a heap buffer overflow when processing pixel data from a maliciously crafted FITS file. Exploitation could cause a denial of service or potentially allow arbitrary code execution. The CVSS 3.1 vector indicates the attack requires local access with low complexity and user interaction, and impacts availability but not confidentiality or integrity.

Successful exploitation can cause denial of service or potentially arbitrary code execution on affected systems running Red Hat Enterprise Linux 6 with the vulnerable GIMP component. The CVSS score of 5.5 reflects a medium impact primarily on availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-40915 for current remediation guidance. No official fix or temporary workaround is indicated in the provided data. Users should monitor the vendor advisory for updates and apply patches promptly once available.