Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gtk2Upgrade gtk2-devel | Dec 1, 2016 | Aug 13, 2012 |
| Debian | — | Upgrade gdk-pixbuf | Jul 30, 2024 | Aug 13, 2012 |
| Gentoo Linux | — | Upgrade x11-libs/gdk-pixbuf. | Oct 30, 2017 | Aug 13, 2012 |
| Oracle Solaris | — | Upgrade library/desktop/gtk2 to version 2.20.1-0.175.0.10.0.4.0 on Solaris 11.0Upgrade library/desktop/gtk2/gtk-backend-cups to version 2.20.1-0.175.0.10.0.4.0 on Solaris 11.0 | May 29, 2017 | Aug 13, 2012 |
| Oracle_linux | — | Upgrade gtk2Upgrade gtk2-devel | Oct 16, 2024 | Aug 13, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2012 |
| Suse | — | Upgrade gdk-pixbuf-develUpgrade gdk-pixbuf-32bitUpgrade gtk2-docUpgrade gtk2-x86Upgrade gtk2-devel-32bitUpgrade gtk2-32bitUpgrade gtk2-langUpgrade gtk2-develUpgrade gtk2Upgrade gdk-pixbuf | Dec 12, 2013 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub