Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xrq2-m5w8-p5wg

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

EPSS

Процентиль: 38%
0.00163
Низкий

7.5 High

CVSS3

Дефекты

CWE-120
CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
redhat
6 месяцев назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
nvd
6 месяцев назад

A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.

CVSS3: 7.5
msrc
5 месяцев назад

Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf

CVSS3: 7.5
debian
6 месяцев назад

A flaw exists in gdk\u2011pixbuf within the gdk_pixbuf__jpeg_image_loa ...

EPSS

Процентиль: 38%
0.00163
Низкий

7.5 High

CVSS3

Дефекты

CWE-120
CWE-787