CVE-2026-5201

CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...

GHSA-9PR2-M366-8728 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

CVE-2026-5201 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

CVE-2026-5201 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

GHSA-9PR2-M366-8728 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

Astra Linux – Vulnerability in gdk-pixbuf

In GNOME GdkPixbuf also known as gdk-pixbuf up to version 2.42.10, the ANI decoder used for Windows animated cursors encounters heap memory corruption when parsing chunks from a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, resulting in a denial-of-service...

MGASA-2026-0503 Updated mingw-gdk-pixbuf package fixes security vulnerabilities

out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...

Updated mingw-gdk-pixbuf package fixes security vulnerabilities

out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...

CVE-2026-81893 affecting package gdk-pixbuf2 for versions less than 2.42.10-6

CVE-2026-81893 affecting package gdk-pixbuf2 for versions less than 2.42.10-6. A patched version of the package is available...

AlmaLinux 9.6 [TuxCare] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules / etc (ALMALINUX9.6:CLSA-2026:1777882062)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777882062 advisory. - A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper...

Rocky Linux 9 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2026_10708)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610708 advisory. gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image CVE-2026-5201 Tenable has extracted the...

Rocky Linux 9.6 [TuxCare] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules / etc (ALMALINUX9.6:CLSA-2026:1777882062)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777882062 advisory. - A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper...

Rocky Linux 10.2 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2026_10707)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610707 advisory. gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image CVE-2026-5201 Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2026_10741)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610741 advisory. gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image CVE-2026-5201 Tenable has extracted the...

Rocky Linux 9 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2026_19210)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619210 advisory. gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image CVE-2026-5201 Tenable has extracted the...

Rocky Linux 10.0 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2025_12862)

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202512862 advisory. gdk?pixbuf: Heap?buffer?overflow in gdk?pixbuf CVE-2025-7345 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2024_3834)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243834 advisory. gdk-pixbuf2: heap memory corruption on gdk-pixbuf CVE-2022-48622 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

AlmaLinux 9.2 [TuxCare] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules / etc (ALMALINUX9.2:CLSA-2025:1757698525)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1757698525 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-debuginfo / gdk-pixbuf2-debugsource / etc (crlsa-2024_3341)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243341 advisory. gdk-pixbuf2: heap memory corruption on gdk-pixbuf CVE-2022-48622 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9.6 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules Multiple Vulnerabilities (ciqsa-2026_1520)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261520 advisory. This advisory aggregates security fixes for the gdk-pixbuf2 SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2025-7345, CVE-2021-44648, CVE-2022-48622,...