Reference page — cumulative record through Saturday, October 3, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-6384

CVE-2026-6384HIGH

Red Hat Red Hat Enterprise Linux 6 — Gimp: gimp: arbitrary code execution or denial of service via buffer overflow in gif image processing

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   R  U  H  H  H    7.8   .0030   20.9     —

AFFECTED
  Product                     Versions     Fixed
  Red Hat Enterprise Linux 6  unspecified  —
  Red Hat Enterprise Linux 7  unspecified  —
  Red Hat Enterprise Linux 8  unspecified  —
  Red Hat Enterprise Linux 9  unspecified  —

TIMELINE
  Apr 15  Reserved by redhat
  Apr 15  Published (CNA: redhat)
  Sep 30  RESCORED — CVE-2026-6384 (Red Hat Enterprise Linux 6). CVSS 7.3 → 7.8 (NVD).

CWE-120 · CNA: redhat · CVSS v3.1 · 3 references · NVD status: Modified

Description

A flaw was found in gimp. This buffer overflow vulnerability in the GIF image loading component's `ReadJeffsImage` function allows an attacker to write beyond an allocated buffer by processing a specially crafted GIF file. This can lead to a denial of service or potentially arbitrary code execution.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
April 15, 2026	Reserved	Reserved by redhat
April 15, 2026	Published	Published (CNA: redhat)
September 30, 2026	RESCORED	RESCORED — CVE-2026-6384 (Red Hat Enterprise Linux 6). CVSS 7.3 → 7.8 (NVD).

Affected

Affected products and packages — 4 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Red Hat	Red Hat Enterprise Linux 6	—	—	—
Red Hat	Red Hat Enterprise Linux 7	—	—	—
Red Hat	Red Hat Enterprise Linux 8	—	—	—
Red Hat	Red Hat Enterprise Linux 9	—	—	—

Weaknesses

CWE-120

References (3)

https://access.redhat.com/security/cve/CVE-2026-6384 [Vendor Advisory]
https://bugzilla.redhat.com/show_bug.cgi?id=2458749 [Issue Tracking, Vendor Advisory]
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6384.json

Authoritative record: CVE-2026-6384 at cve.org

Vendors: red hat

Weaknesses: CWE-120

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-6384 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Saturday, October 3, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.