This vulnerability (CVE-2026-6384) affects the ReadJeffsImage function in the GIF image loader of gimp on Red Hat Enterprise Linux 6. It is a classic buffer overflow caused by copying data without checking the size of the input, allowing an attacker to write beyond the allocated buffer when processing a maliciously crafted GIF file. The CVSS 3.1 base score is 7.3, indicating high severity, with attack vector local, low attack complexity, low privileges required, and user interaction needed. The impact includes confidentiality, integrity, and availability loss, potentially enabling denial of service or arbitrary code execution.

Successful exploitation can lead to denial of service or arbitrary code execution on affected systems running Red Hat Enterprise Linux 6 with the vulnerable gimp component. The vulnerability affects confidentiality, integrity, and availability. No known exploits in the wild have been reported as of the provided data.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-6384 for current remediation guidance. Since no explicit patch or workaround information is provided, users should monitor the vendor advisory for updates. Until a fix is available, avoid processing untrusted GIF files with the vulnerable gimp component to reduce risk.