CVE-2025-7345

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

CVE-2025-7345

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the gdkpixbuf process. An attacker can cause a denial of service by sending specially crafted image files that trigger a heap buffer overflow. Remediation Upgrade gdk-pixbuf to version 2.44.4 or higher. Reference...

gdk-pixbuf 缓冲区错误漏洞

gdk-pixbuf is an image loading library in the GNOME open source. A buffer error vulnerability exists in gdk-pixbuf, which stems from a heap buffer overflow in the gdkpixbufjpegimageloadincrement function and the gbase64encodestep function when processing a specially crafted JPEG image, which coul...

[SECURITY] Fedora 41 Update: mingw-gdk-pixbuf-2.42.12-4.fc41

MinGW Windows GDK Pixbuf library...

[SECURITY] Fedora 42 Update: mingw-gdk-pixbuf-2.42.12-4.fc42

MinGW Windows GDK Pixbuf library...

Fedora: Security Advisory (FEDORA-2025-f759399b58)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : mingw-gdk-pixbuf (2025-be7e8114df)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-be7e8114df advisory. Backport fix for CVE-2025-6199. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora: Security Advisory (FEDORA-2025-be7e8114df)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : mingw-gdk-pixbuf (2025-f759399b58)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f759399b58 advisory. Backport fix for CVE-2025-6199. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Updated gdk-pixbuf2.0 packages fix security vulnerability

It was discovered that incorrect bounds validation in the GIF decoder of the GDK Pixbuf library may result in memory disclosure...

MGASA-2025-0198 Updated gdk-pixbuf2.0 packages fix security vulnerability

It was discovered that incorrect bounds validation in the GIF decoder of the GDK Pixbuf library may result in memory disclosure...

Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: CVE-2024-47540: Fixed an uninitialized stack memory in Matroska/WebM demuxer. boo1234421 CVE-2024-47537: Fixed an out-of-bounds write in isomp4/qtdemux.c. boo1234414 CVE-2024-47543: Fixed an out-of-bounds write in...

Debian: Security Advisory (DLA-4225-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2025-6199

A flaw was found in the GIF parser of GdkPixbuf's LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the...

[SECURITY] [DLA 4225-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4225-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 23, 2025 https://wiki.debian.org/LTS -...

DLA-4225-1 gdk-pixbuf - security update

Bulletin has no description...

Debian dla-4225 : gdk-pixbuf-tests - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4225 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4225-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DSA-5946-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5946-1] gdk-pixbuf security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5946-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 22, 2025 https://www.debian.org/security/faq -...