The vulnerability is a heap-based buffer overflow in GIMP’s GIF export plug‑in. If an image with extremely large width and height is exported, GIMP calculates the pixel buffer size using a 32‑bit value that can wrap, allocating a smaller buffer than needed. Later, the GEGL engine writes data using the true image extent, causing more memory to be written than the buffer can hold. The overflow could corrupt heap memory and potentially allow an attacker to execute arbitrary code with the privileges of the running GIMP process. The weakness is CWE‑119, an Improper Handling of Buffer Size that often leads to memory corruption.

The affected platform is Red Hat Enterprise Linux, versions 6 through 10. All standard GIMP installations on these operating systems that use the default GIF export plug‑in are vulnerable. No specific GIMP version is listed, but the issue resides in the export logic common to the installed package on the mentioned RH Enterprise Linux releases.

The CVSS score of 6.3 indicates a medium severity vulnerability. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widely publicized exploitation. The likely attack vector is local: a user or malicious script that initiates a GIF export of an oversized image can trigger the overflow. Because the flaw is only triggered during export, an attacker would need access to run GIMP or alter export scripts to supply large dimensions. This limits the threat to environments where GIMP is used to process untrusted or high‑resolution images, but local execution could still lead to arbitrary code execution or a denial of service.