GIMP's file‑seattle‑filmworks plugin contains an out‑of‑bounds write bug. A specially crafted Seattle Filmworks (.sfw) file can overflow a buffer when opened, causing the plugin to crash. The crash leads to a denial of service, disrupting the stability of the GIMP application and potentially allowing a local attacker to interrupt graphical workflows.

The vulnerability affects systems that run GIMP on Red Hat Enterprise Linux 6, 7, 8, and 9. All versions of GIMP that include the file‑seattle‑filmworks plugin prior to the published fix are vulnerable.

The flaw has a CVSS score of 6.1, indicating moderate risk. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. An attacker must supply the malicious .sfw file and have it processed by a user running GIMP. It is therefore a local or remote threat that relies on user interaction. The lack of a public exploit means the probability of exploitation is currently unknown, but the buffer overflow nature warrants caution.