A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade gdk-pixbuf2-debuginfoUpgrade gdk-pixbuf2-testsUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2-devel-debuginfo | Aug 5, 2025 | Jun 17, 2025 |
| Debian | — | Upgrade gdk-pixbuf | Jun 20, 2025 | Jun 17, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2-modules | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2 | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gdk-pixbuf2-helpUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-modules | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 17, 2025 |
| Suse | — | Upgrade libgdk_pixbuf-2_0-0-32bitUpgrade libgdk_pixbuf-2_0-0Upgrade typelib-1_0-gdkpixdata-2_0Upgrade gdk-pixbuf-query-loaders-32bitUpgrade gdk-pixbuf-query-loadersUpgrade gdk-pixbuf-langUpgrade typelib-1_0-gdkpixbuf-2_0Upgrade gdk-pixbuf-develUpgrade gdk-pixbuf-thumbnailerUpgrade gdk-pixbuf-devel-32bit | Aug 27, 2025 | Aug 21, 2025 |
| Ubuntu | — | Upgrade libgdk-pixbuf2.0-0 (Ubuntu Pro)Upgrade libgdk-pixbuf-2.0-0 | Jul 23, 2025 | Jun 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub