This vulnerability involves incorrect buffer size calculation in the GIMP DDS (DirectDraw Surface) file parser on Red Hat Enterprise Linux 6. When a DDS file declares a D3D9 pixel format but specifies a lower bits-per-pixel (bpp) value in the header, the loader allocates a heap buffer that is too small. Subsequent pixel data processing writes beyond the allocated buffer boundary, causing heap metadata corruption. This can lead to denial of service or potential arbitrary code execution. The flaw is triggered by opening a crafted DDS image file with GIMP. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity, with local attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation can cause heap metadata corruption, potentially allowing an attacker to execute arbitrary code, crash the application, or cause denial of service. The vulnerability requires local access and user interaction (opening a crafted DDS file) but does not require privileges. It affects confidentiality, integrity, and availability of the affected system.

Red Hat advises users to avoid opening untrusted DirectDraw Surface (DDS) image files with GIMP. If GIMP is not essential, removing the 'gimp' package eliminates this attack vector. No official patch or fix is currently confirmed; users should monitor the Red Hat advisory for updates. Following these mitigations reduces the risk until a fix is available.