CVE-2021-44648

CVE-2021-44648 affects GNOME gdk-pixbuf 2.42.6 with a heap-buffer overflow in the GIF lzw decoder when the minimum code size is 12. Connected advisories confirm the issue across multiple distributions and architectures. Exploitation details are not provided in the documents; the vulnerability can...

CVE-2022-48622

CVE-2022-48622 affects GNOME GdkPixbuf (gdk-pixbuf2) through 2.42.10. The ANI decoder can heap-corrupt when parsing crafted .ani files (function ani_load_chunk in io-ani.c), with impact to denial of service or potential code execution. Affected advisories note fixes in newer gdk-pixbuf2 releases ...

CVE-2005-2975

CVE-2005-2975 affects the gdk-pixbuf XPM image reader in GTK+ (io-xpm.c): vulnerable in GTK+ builds prior to 2.8.7 to denial-of-service via a crafted XPM image with many colors (infinite loop). Remediation: upgrade to GTK+ 2.8.7 or apply the upstream security update/version referenced by the advi...

CVE-2004-0783

CVE-2004-0783 describes a stack-based buffer overflow in xpm_extract_color (io-xpm.c) within the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and in gdk-pixbuf before 0.22. This can allow remote attackers to execute arbitrary code via a crafted color string. The Initial Description confir...

CVE-2004-0788

CVE-2004-0788 describes an integer overflow in the ICO image loader of GdkPixbuf/GTK+ (gdk-pixbuf before 0.22 and gtk2 before 2.2.4). A crafted ICO file can cause a denial of service (remote crash) on vulnerable applications. Connected sources also reference related ICO/XPM loaders and other imag...

CVE-2005-2976

CVE-2005-2976 describes an integer overflow in io-xpm.c of gdk-pixbuf 0.22.0 used by GTK+ (pre-2.8.7). An XPM image with large height/width/color values can crash the process or allow arbitrary code execution. The issue is caused by overflow in XPM parsing. Affected product: gdk-pixbuf/GTK+ up to...

CVE-2004-0753

The vulnerability CVE-2004-0753 affects the BMP image processing path in gdk-pixbuf (before 0.22) and GTK+ gtk2 (before 2.2.4), where a crafted BMP file can trigger an infinite loop and cause a remote denial of service. Public records from multiple advisories corroborate affected packages and pro...

CVE-2004-0782

CVE-2004-0782: Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the GTK+ XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and in gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that trigger a heap-based buffer overflow. The GT...

CVE-2005-3186

CVE-2005-3186 describes a heap-based buffer overflow in GTK+ gdk-pixbuf’s XPM image reader caused by an integer overflow when processing certain XPM files with many colors. The result is arbitrary code execution in affected environments. Connected advisories confirm the vulnerability affects gdk-...

CVE-2004-0111

CVE-2004-0111 affects gdk-pixbuf prior to 0.20; processing a malformed BMP can crash the application (denial of service). Debian/Red Hat advisories confirm a fix in newer gdk-pixbuf releases (e.g., RHSA-2004:103 recommends upgrading to a non-vulnerable version such as 0.22). The issue arises in t...

CVE-2025-6199

CVE-2025-6199 affects the GIF LZW decoder in GdkPixbuf (gdk-pixbuf2). When an invalid symbol is decompressed, the output size is set to the full buffer length instead of the number of written bytes, causing uninitialized buffer areas to be emitted and potentially leaking memory contents from GIF ...