This vulnerability is a buffer overflow in the file-seattle-filmworks plugin of GIMP on Red Hat Enterprise Linux 6. When a user opens a maliciously crafted Seattle Filmworks file, the plugin may perform an out-of-bounds write, leading to a crash. The CVSS 3.1 base score is 6.1 (medium severity) with attack vector local, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. The vulnerability can cause denial of service by crashing the plugin and potentially affecting GIMP stability. Red Hat has published an advisory but has not indicated an available patch or remediation level.

Successful exploitation results in denial of service by crashing the file-seattle-filmworks plugin and possibly destabilizing the GIMP application. There is no indication of confidentiality or significant integrity impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-40919 for current remediation guidance. Until a fix is available, avoid opening untrusted Seattle Filmworks files with GIMP on affected systems to prevent triggering the vulnerability.