A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-devel | Apr 29, 2026 | Apr 27, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-tests | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-tests | Apr 14, 2026 | Mar 31, 2026 |
| Debian | — | Upgrade gdk-pixbuf | Apr 13, 2026 | Apr 13, 2026 |
| Oracle_linux | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-devel | Apr 29, 2026 | Mar 31, 2026 |
| Redhat_linux | — | Upgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoNo solution existsUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-debuginfo | Apr 28, 2026 | Mar 31, 2026 |
| Rocky_linux | — | Upgrade gdk-pixbuf2Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-devel-debuginfo | Apr 29, 2026 | Apr 28, 2026 |
| Suse | — | Upgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-query-loadersUpgrade libgdk_pixbuf-2_0-0Upgrade typelib-1_0-GdkPixbuf-2_0Upgrade typelib-1_0-GdkPixdata-2_0Upgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-langUpgrade libgdk_pixbuf-2_0-0-32bitUpgrade gdk-pixbuf-devel | Apr 21, 2026 | Apr 17, 2026 |
| Ubuntu | — | Upgrade libgdk-pixbuf-2.0-0Upgrade libgdk-pixbuf2.0-0 (Ubuntu Pro) | Apr 9, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub