This vulnerability involves an out-of-bounds write flaw (CWE-787) in GIMP's PSD and PAA file format plugins on Red Hat Enterprise Linux 6. A local attacker with low privileges can exploit this by convincing a user to open a maliciously crafted image file, causing memory corruption that may lead to arbitrary code execution, information disclosure, or application crashes. The attack vector requires local access and user interaction. Red Hat's advisory confirms the vulnerability but does not currently specify a remediation or patch. The CVSS v3.1 base score is 7.3, reflecting high confidentiality, integrity, and availability impacts.

Successful exploitation can result in high impact including unauthorized code execution, disclosure of sensitive information, and denial of service through application crashes. The vulnerability requires local access and user interaction but can lead to significant system compromise or data exposure if exploited.

Red Hat has not yet released an official fix or patch for this vulnerability. Users should mitigate risk by avoiding opening untrusted or suspicious PSD and PAA image files with GIMP. Exercising caution with image files from unknown sources is recommended until a patch is available. Monitor Red Hat's advisory page for updates on remediation.