Описание
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-5201
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5201.json
- https://lists.debian.org/debian-lts-announce/2026/04/msg00010.html
- https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304
- https://bugzilla.redhat.com/show_bug.cgi?id=2453291
- https://access.redhat.com/security/cve/CVE-2026-5201
- https://access.redhat.com/errata/RHSA-2026:25096
- https://access.redhat.com/errata/RHSA-2026:19725
- https://access.redhat.com/errata/RHSA-2026:19724
- https://access.redhat.com/errata/RHSA-2026:19210
- https://access.redhat.com/errata/RHSA-2026:19127
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:16030
- https://access.redhat.com/errata/RHSA-2026:16009
- https://access.redhat.com/errata/RHSA-2026:16008
- https://access.redhat.com/errata/RHSA-2026:12115
- https://access.redhat.com/errata/RHSA-2026:12114
- https://access.redhat.com/errata/RHSA-2026:12062
- https://access.redhat.com/errata/RHSA-2026:12061
- https://access.redhat.com/errata/RHSA-2026:12060
- https://access.redhat.com/errata/RHSA-2026:11806
- https://access.redhat.com/errata/RHSA-2026:11328
- https://access.redhat.com/errata/RHSA-2026:11327
- https://access.redhat.com/errata/RHSA-2026:11326
- https://access.redhat.com/errata/RHSA-2026:11325
- https://access.redhat.com/errata/RHSA-2026:10741
- https://access.redhat.com/errata/RHSA-2026:10708
- https://access.redhat.com/errata/RHSA-2026:10707
Связанные уязвимости
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer ove ...