Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5201

Опубликовано: 31 мар. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:gdk-pixbuf:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.01069
Низкий

7.5 High

CVSS3

Дефекты

CWE-122
CWE-122

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

CVSS3: 7.5
redhat
4 месяца назад

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

CVSS3: 7.5
msrc
4 месяца назад

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

CVSS3: 7.5
debian
4 месяца назад

A flaw was found in the gdk-pixbuf library. This heap-based buffer ove ...

suse-cvrf
4 месяца назад

Security update for gdk-pixbuf

EPSS

Процентиль: 61%
0.01069
Низкий

7.5 High

CVSS3

Дефекты

CWE-122
CWE-122