ZeroDay Findings
Sign inSign up

Findings

CVE-2026-6384

A flaw was found in gimp.

Published Apr 15, 2026 · updated Sep 30, 2026 · gimp gimp

A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 15, 2026 · NIST NVD

    Detected

    A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.

  2. Sep 30, 2026 · NIST NVD

    Updated

    A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.

Affected

  • cpe gimp/gimpversion unspecified
  • cpe redhat/enterprise linux6.0
  • cpe redhat/enterprise linux7.0
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgVulnerability recordCVE-2026-6384

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-6384

    A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbit

    nvd.nist.gov

References