This vulnerability involves a stack buffer overflow in GIMP's TIM image loader 4BPP decoding path on Red Hat Enterprise Linux 6. A local user can trigger a denial of service by opening a maliciously crafted TIM image file that causes an unconditional overflow when writing to a variable-length array, resulting in application crash. The CVSS 3.1 vector is AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H, reflecting local attack vector, low attack complexity, low privileges required, user interaction needed, unchanged scope, no confidentiality or integrity impact, and high impact on availability. No known exploits are reported in the wild. The vendor advisory linked does not provide explicit patch or mitigation details.

The impact is limited to denial of service (application crash) caused by a stack buffer overflow when processing a specially crafted TIM image file in GIMP on Red Hat Enterprise Linux 6. There is no reported impact on confidentiality or integrity. The vulnerability requires local user access and user interaction to trigger. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-40916 for current remediation guidance. Until an official fix is available, avoid opening untrusted TIM image files with GIMP on affected systems. No vendor advisory content currently indicates that the issue is already mitigated or that no action is required.