A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2 | Aug 8, 2025 | Aug 7, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-tests-debuginfo | Aug 5, 2025 | Jul 8, 2025 |
| Debian | — | Upgrade gdk-pixbuf | Jul 10, 2025 | Jul 8, 2025 |
| Freebsd | — | Upgrade gdk-pixbuf2 | Jul 25, 2025 | Jul 24, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2 | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2 | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-help | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-devel | Aug 6, 2025 | Jul 8, 2025 |
| Redhat_linux | — | Upgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-testsNo solution existsUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-devel-debuginfo | Jul 9, 2025 | Jul 8, 2025 |
| Rocky_linux | — | Upgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-xlib-debuginfo | Feb 5, 2026 | Sep 8, 2025 |
| Suse | — | Upgrade gdk-pixbuf-langUpgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-query-loadersUpgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-develUpgrade gdk-pixbuf-devel-32bitUpgrade typelib-1_0-gdkpixdata-2_0Upgrade typelib-1_0-gdkpixbuf-2_0Upgrade libgdk_pixbuf-2_0-0-32bitUpgrade libgdk_pixbuf-2_0-0 | Aug 27, 2025 | Aug 11, 2025 |
| Ubuntu | — | Upgrade libgdk-pixbuf2.0-0 (Ubuntu Pro)Upgrade libgdk-pixbuf-2.0-0 | Jul 14, 2025 | Jul 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub