This vulnerability exists in the GIMP file-fli plugin due to a signed integer overflow during memory allocation for image buffers when processing FLI image files. The multiplication of image width and height can overflow the integer limit, leading to incorrect memory allocation size. A remote attacker can exploit this by convincing a local user to open a maliciously crafted FLI file, causing GIMP to crash and resulting in denial of service. The vulnerability requires user interaction and local access. The flaw is tracked as CVE-2026-59088 and affects Red Hat Enterprise Linux 6 distributions that include the vulnerable GIMP component. The vendor advisory does not confirm a patch availability or remediation level at this time.

The vulnerability leads to a denial of service condition by crashing the GIMP application when processing specially crafted FLI image files. There is no impact on confidentiality or integrity reported. The attack requires local user interaction to open the malicious file. The CVSS score of 5.5 reflects a medium severity with high availability impact but no confidentiality or integrity impact.

Currently, no official patch or fix has been confirmed by Red Hat. Users should mitigate this vulnerability by avoiding opening FLI image files from untrusted or unknown sources. Exercising caution with the origin of FLI files can prevent triggering the denial of service. Monitor the Red Hat advisory page for updates on patch availability and apply official fixes once released.