CVE-2018-18718

CVE-2018-18718 affects gThumb up to 3.6.2; a double-free in add_themes_from_dir (dlg-contact-sheet.c) frees the same buffer twice, enabling memory corruption. Patches exist in downstream advisories (e.g., Mageia/MGASA-2019-0039, openSUSE/SU-2019:0022-1, OSV entries) and updated gthumb packages (e...

CVE-2019-20326

The CVE-2019-20326 issue affects gThumb (image viewer) across multiple distros, caused by a heap-based buffer overflow in cairo_image_surface_create_from_jpeg() inside extensions/cairo_io/cairo-image-surface-jpeg.c. In Debian 9 (DLA-2749), the fix is in gthumb 3:3.4.4.1-5+deb9u2. Ubuntu advisorie...

CVE-2020-36427

CVE-2020-36427 affects GNOME gThumb prior to version 3.10.1. A malformed JPEG image can trigger an application crash (DoS) in gThumb, as described in multiple sources (e.g., OSV references and vendor advisories). The known public statement: vulnerable component is gThumb’s JPEG handling; root cau...