A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gdk-pixbuf2alma-upgrade-gdk-pixbuf2-develalma-upgrade-gdk-pixbuf2-modulesalma-upgrade-gdk-pixbuf2-xlibalma-upgrade-gdk-pixbuf2-xlib-devel | Aug 8, 2025 | Aug 7, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-gdk-pixbuf2amazon-linux-ami-2-upgrade-gdk-pixbuf2-debuginfoamazon-linux-ami-2-upgrade-gdk-pixbuf2-develamazon-linux-ami-2-upgrade-gdk-pixbuf2-tests | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-gdk-pixbuf2amazon-linux-2023-upgrade-gdk-pixbuf2-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-debugsourceamazon-linux-2023-upgrade-gdk-pixbuf2-develamazon-linux-2023-upgrade-gdk-pixbuf2-devel-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-modulesamazon-linux-2023-upgrade-gdk-pixbuf2-modules-debuginfoamazon-linux-2023-upgrade-gdk-pixbuf2-testsamazon-linux-2023-upgrade-gdk-pixbuf2-tests-debuginfo | Aug 5, 2025 | Jul 8, 2025 | |
| Debian | debian-upgrade-gdk-pixbuf | Jul 10, 2025 | Jul 8, 2025 | |
| Freebsd | freebsd-upgrade-package-gdk-pixbuf2 | Jul 25, 2025 | Jul 24, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-gdk-pixbuf2huawei-euleros-2_0_sp11-upgrade-gdk-pixbuf2-develhuawei-euleros-2_0_sp11-upgrade-gdk-pixbuf2-helphuawei-euleros-2_0_sp11-upgrade-gdk-pixbuf2-modules | Oct 14, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-gdk-pixbuf2huawei-euleros-2_0_sp12-upgrade-gdk-pixbuf2-develhuawei-euleros-2_0_sp12-upgrade-gdk-pixbuf2-helphuawei-euleros-2_0_sp12-upgrade-gdk-pixbuf2-modules | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-gdk-pixbuf2huawei-euleros-2_0_sp13-upgrade-gdk-pixbuf2-develhuawei-euleros-2_0_sp13-upgrade-gdk-pixbuf2-helphuawei-euleros-2_0_sp13-upgrade-gdk-pixbuf2-modules | Oct 24, 2025 | Sep 9, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-gdk-pixbuf2oracle-linux-upgrade-gdk-pixbuf2-develoracle-linux-upgrade-gdk-pixbuf2-modulesoracle-linux-upgrade-gdk-pixbuf2-testsoracle-linux-upgrade-gdk-pixbuf2-xliboracle-linux-upgrade-gdk-pixbuf2-xlib-devel | Aug 6, 2025 | Jul 8, 2025 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-gdk-pixbuf2redhat-upgrade-gdk-pixbuf2-debuginforedhat-upgrade-gdk-pixbuf2-debugsourceredhat-upgrade-gdk-pixbuf2-develredhat-upgrade-gdk-pixbuf2-devel-debuginforedhat-upgrade-gdk-pixbuf2-modulesredhat-upgrade-gdk-pixbuf2-modules-debuginforedhat-upgrade-gdk-pixbuf2-testsredhat-upgrade-gdk-pixbuf2-tests-debuginforedhat-upgrade-gdk-pixbuf2-xlibredhat-upgrade-gdk-pixbuf2-xlib-debuginforedhat-upgrade-gdk-pixbuf2-xlib-devel | Jul 9, 2025 | Jul 8, 2025 | |
| Rocky_linux | rocky-upgrade-gdk-pixbuf2rocky-upgrade-gdk-pixbuf2-debuginforocky-upgrade-gdk-pixbuf2-debugsourcerocky-upgrade-gdk-pixbuf2-develrocky-upgrade-gdk-pixbuf2-devel-debuginforocky-upgrade-gdk-pixbuf2-modulesrocky-upgrade-gdk-pixbuf2-modules-debuginforocky-upgrade-gdk-pixbuf2-xlibrocky-upgrade-gdk-pixbuf2-xlib-debuginforocky-upgrade-gdk-pixbuf2-xlib-devel | Feb 5, 2026 | Sep 8, 2025 | |
| Suse | — | suse-upgrade-gdk-pixbuf-develsuse-upgrade-gdk-pixbuf-devel-32bitsuse-upgrade-gdk-pixbuf-langsuse-upgrade-gdk-pixbuf-query-loaderssuse-upgrade-gdk-pixbuf-query-loaders-32bitsuse-upgrade-gdk-pixbuf-thumbnailersuse-upgrade-libgdk_pixbuf-2_0-0suse-upgrade-libgdk_pixbuf-2_0-0-32bitsuse-upgrade-typelib-1_0-gdkpixbuf-2_0suse-upgrade-typelib-1_0-gdkpixdata-2_0 | Aug 27, 2025 | Aug 11, 2025 |
| Ubuntu | ubuntu-pro-upgrade-libgdk-pixbuf2-0-0ubuntu-upgrade-libgdk-pixbuf-2-0-0 | Jul 14, 2025 | Jul 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub