GHSA-9pr2-m366-8728HighCVSS 7.5
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs...
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
🔗 References (27)
- https://nvd.nist.gov/vuln/detail/CVE-2026-5201
- https://access.redhat.com/security/cve/CVE-2026-5201
- https://bugzilla.redhat.com/show_bug.cgi?id=2453291
- https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304
- https://lists.debian.org/debian-lts-announce/2026/04/msg00010.html
- https://access.redhat.com/errata/RHSA-2026:10708
- https://access.redhat.com/errata/RHSA-2026:10707
- https://access.redhat.com/errata/RHSA-2026:10741
- https://access.redhat.com/errata/RHSA-2026:11325
- https://access.redhat.com/errata/RHSA-2026:11326
- https://access.redhat.com/errata/RHSA-2026:11327
- https://access.redhat.com/errata/RHSA-2026:11328
- https://access.redhat.com/errata/RHSA-2026:11806
- https://access.redhat.com/errata/RHSA-2026:12060
- https://access.redhat.com/errata/RHSA-2026:12061
- https://access.redhat.com/errata/RHSA-2026:12115
- https://access.redhat.com/errata/RHSA-2026:12114
- https://access.redhat.com/errata/RHSA-2026:12062
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:16030
- https://access.redhat.com/errata/RHSA-2026:16009
- https://access.redhat.com/errata/RHSA-2026:16008
- https://access.redhat.com/errata/RHSA-2026:19210
- https://access.redhat.com/errata/RHSA-2026:19127
- https://access.redhat.com/errata/RHSA-2026:19725
- https://access.redhat.com/errata/RHSA-2026:19724
- https://github.com/advisories/GHSA-9pr2-m366-8728