gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf

A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...

Moderate: Red Hat Security Advisory: gdk-pixbuf2 security update

An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Oracle Linux 10 : gdk-pixbuf2 (ELSA-2025-12862)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-12862 advisory. 2.42.12-4 - jpeg: Be more careful with chunked icc data Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 10 : gdk-pixbuf2 (RHSA-2025:12862)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12862 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits su...

RHEL 9 : gdk-pixbuf2 (RHSA-2025:12841)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12841 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits suc...

Amazon Linux 2 : gdk-pixbuf2 (ALAS-2025-2948)

The version of gdk-pixbuf2 installed on the remote host is prior to 2.36.12-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2948 advisory. In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory...

Important: gdk-pixbuf2

Issue Overview: In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a deni...

Fedora: Security Advisory (FEDORA-2025-f0bec53a1d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: gdk-pixbuf2-2.42.12-12.fc42

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

Fedora 42 : gdk-pixbuf2 (2025-f0bec53a1d)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-f0bec53a1d advisory. This update fixes CVE-2025-7345 and CVE-2025-6199. Tenable has extracted the preceding description block directly from the Fedora security advisory...

gdk-pixbuf-devel-2.42.12-4.1 on GA media (moderate)

gdk-pixbuf-devel-2.42.12-4.1 on GA media Announcement ID: openSUSE-SU-2025:15397-1 Rating: moderate Cross-References: CVE-2025-6199 CVSS scores: CVE-2025-6199 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2025-6199 SUSE : 4.8...

OPENSUSE-SU-2025:15397-1 gdk-pixbuf-devel-2.42.12-4.1 on GA media

These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-4.1 package on the GA media of openSUSE Tumbleweed...

FreeBSD : gdk-pixbuf2 -- a heap buffer overflow (3d4393b2-68a5-11f0-b2b4-589cfc10832a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 3d4393b2-68a5-11f0-b2b4-589cfc10832a advisory. [email protected] reports: A flaw exists in gdk-pixbuf within the gdkpixbufjpegimageloadincrement function...

OESA-2025-1913 gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites. Security Fixes: A vulnerability was found in gdk‑pixbuf affected versi...

NewStart CGSL MAIN 7.02 : gdk-pixbuf2 Vulnerability (NS-SA-2025-0117)

The remote NewStart CGSL host, running version MAIN 7.02, has gdk-pixbuf2 packages installed that are affected by a vulnerability: - In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsin...

gdk-pixbuf2 -- a heap buffer overflow

[email protected] reports: A flaw exists in gdk-pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads...

Ubuntu: Security Advisory (USN-7662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-7662-1: GDK-PixBuf vulnerabilities

It was discovered that GDK-Pixbuf incorrectly handled certain GIF files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. CVE-2025-6199 It was discovered that GDK-Pixbuf...

USN-7662-1 gdk-pixbuf vulnerabilities

It was discovered that GDK-Pixbuf incorrectly handled certain GIF files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. CVE-2025-6199 It was discovered that GDK-Pixbuf...