This vulnerability involves a classic buffer overflow in the ReadJeffsImage function of the GIF image loader in gimp on Red Hat Enterprise Linux 6. An attacker can exploit this by providing a maliciously crafted GIF file that triggers writing beyond the allocated buffer boundaries. The CVSS 3.1 score is 7.3 (high), reflecting local attack vector with low complexity, requiring low privileges and user interaction, and impacting confidentiality, integrity, and availability. The vendor advisory does not specify a patch or mitigation status.

Successful exploitation can lead to denial of service or potentially arbitrary code execution on affected systems running Red Hat Enterprise Linux 6 with the vulnerable gimp component. The impact affects confidentiality, integrity, and availability as indicated by the CVSS vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-6384 for current remediation guidance. Until an official fix is available, avoid processing untrusted GIF files with the affected gimp component to reduce risk.