CVE-2026-6384: Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing
A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's ReadJeffsImage function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6384?
CVE-2026-6384 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2026-6384?
To fix CVE-2026-6384, update GIMP to the latest version that includes patches for this vulnerability.
What types of attacks can CVE-2026-6384 facilitate?
CVE-2026-6384 can facilitate attacks that result in arbitrary code execution or denial of service when processing malicious GIF images.
Which software is affected by CVE-2026-6384?
CVE-2026-6384 affects GIMP, specifically its GIF image processing component.
How can I identify if I am vulnerable to CVE-2026-6384?
You can identify if you are vulnerable to CVE-2026-6384 by checking if you are using a version of GIMP that is prior to the patch release for this vulnerability.