CVE-2026-5201

CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...

Medium: gdk-pixbuf2

Issue Overview: A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an...

Medium: gdk-pixbuf2

Issue Overview: A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an...

Rocky Linux 9.6 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules (ciqsa-2026_1768)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261768 advisory. This advisory aggregates security fixes for the gdk-pixbuf2 SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-5201. Tenable has extracted the preceding descriptio...

CLEANSTART-2026-WC67623 make_available_at_least function in io-tiff

Security vulnerability affects the gdk-pixbuf package. The makeavailableatleast function in io-tiff...

CLEANSTART-2026-XN79166 gdk-pixbuf-thumbnailer

Security vulnerability affects the gdk-pixbuf package. gdk-pixbuf-thumbnailer...

CLEANSTART-2026-DM91026 Integer overflow in io-ico

Security vulnerability affects the gdk-pixbuf package. Integer overflow in io-ico...

CLEANSTART-2026-LH53799 GNOME gdk-pixbuf 2

Security vulnerability affects the gdk-pixbuf package. GNOME gdk-pixbuf 2...

CLEANSTART-2026-PY28205 GNOME gdk-pixbuf (aka GdkPixbuf) before 2

Security vulnerability affects the gdk-pixbuf package. GNOME gdk-pixbuf aka GdkPixbuf before 2...

CLEANSTART-2026-ZR59113 In GNOME GdkPixbuf (aka gdk-pixbuf) through 2

Security vulnerability affects the gdk-pixbuf package. In GNOME GdkPixbuf aka gdk-pixbuf through 2...

GHSA-9PR2-M366-8728 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

CVE-2026-5201 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

GHSA-9PR2-M366-8728 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

CVE-2026-5201 vulnerabilities

Vulnerabilities for packages: gdk-pixbuf...

Astra Linux – vulnerability in gdk-pixbuf

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files where the minimum lzw code size is 12...

Astra Linux – Vulnerability in gdk-pixbuf

In GNOME GdkPixbuf also known as gdk-pixbuf up to version 2.42.10, the ANI decoder used for Windows animated cursors encounters heap memory corruption when parsing chunks from a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, resulting in a denial-of-service...

Unity Linux 20.1070e Security Update: gdk-pixbuf2 (UTSA-2026-130381)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130381 advisory. A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave sta...

MGASA-2026-0503 Updated mingw-gdk-pixbuf package fixes security vulnerabilities

out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...

Updated mingw-gdk-pixbuf package fixes security vulnerabilities

out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...

Rocky Linux 9.2 [CIQ] Security Update: gdk-pixbuf2 / gdk-pixbuf2-devel / gdk-pixbuf2-modules Multiple Vulnerabilities (ciqsa-2026_1623)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261623 advisory. This advisory aggregates security fixes for the gdk-pixbuf2 SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2021-44648, CVE-2021-46829, CVE-2011-2485...