attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products
Red Hat Enterprise Linux 10 and Red Hat Enterprise Linux 9
Classified as
CWE-125 (Out-of-bounds Read)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 9
Subsystems
OT Supporting Infrastructure
Sectors
Multiple
What to Know
A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service. (NVD)
What to Do
Monitor Red Hat's web page for any future patch releases.