A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-debuginfo | Aug 5, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade gdk-pixbuf | Jun 20, 2025 | Jun 17, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2-devel | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2 | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2 | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 17, 2025 |
| Suse | — | Upgrade libgdk_pixbuf-2_0-0-32bitUpgrade typelib-1_0-GdkPixdata-2_0Upgrade libgdk_pixbuf-2_0-0Upgrade gdk-pixbuf-develUpgrade gdk-pixbuf-query-loadersUpgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-langUpgrade typelib-1_0-GdkPixbuf-2_0Upgrade gdk-pixbuf-devel-32bit | Aug 27, 2025 | Aug 21, 2025 |
| Ubuntu | — | Upgrade libgdk-pixbuf2.0-0 (Ubuntu Pro)Upgrade libgdk-pixbuf-2.0-0 | Jul 23, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub