Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-gdk-pixbuf | Aug 30, 2017 | Mar 10, 2017 | |
| Debian | debian-upgrade-gdk-pixbuf | Feb 19, 2019 | Mar 9, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-x11-libs-gdk-pixbuf | Oct 30, 2017 | Mar 9, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-gdk-pixbuf2huawei-euleros-2_0_sp2-upgrade-gdk-pixbuf2-devel | Dec 4, 2019 | Mar 10, 2017 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-gdk-pixbuf2huawei-euleros-2_0_sp3-upgrade-gdk-pixbuf2-devel | Dec 18, 2019 | Mar 10, 2017 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-gdk-pixbuf2huawei-euleros-2_0_sp5-upgrade-gdk-pixbuf2-devel | Feb 3, 2021 | Mar 10, 2017 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Mar 9, 2017 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Feb 21, 2017 |
| Suse | — | suse-upgrade-gdk-pixbuf-develsuse-upgrade-gdk-pixbuf-langsuse-upgrade-gdk-pixbuf-query-loaderssuse-upgrade-gdk-pixbuf-query-loaders-32bitsuse-upgrade-gdk-pixbuf-thumbnailersuse-upgrade-gtk2suse-upgrade-gtk2-32bitsuse-upgrade-gtk2-develsuse-upgrade-gtk2-devel-32bitsuse-upgrade-gtk2-docsuse-upgrade-gtk2-langsuse-upgrade-gtk2-x86suse-upgrade-libgdk_pixbuf-2_0-0suse-upgrade-libgdk_pixbuf-2_0-0-32bitsuse-upgrade-typelib-1_0-gdkpixbuf-2_0suse-upgrade-typelib-1_0-gdkpixdata-2_0 | Sep 6, 2017 | Mar 9, 2017 |
| Ubuntu | ubuntu-upgrade-libgdk-pixbuf2-0-0 | Jan 16, 2018 | Mar 9, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub