CVE-2019-20326

The CVE-2019-20326 issue affects gThumb (image viewer) across multiple distros, caused by a heap-based buffer overflow in cairo_image_surface_create_from_jpeg() inside extensions/cairo_io/cairo-image-surface-jpeg.c. In Debian 9 (DLA-2749), the fix is in gthumb 3:3.4.4.1-5+deb9u2. Ubuntu advisorie...

CVE-2020-36427

CVE-2020-36427 affects GNOME gThumb prior to version 3.10.1. A malformed JPEG image can trigger an application crash (DoS) in gThumb, as described in multiple sources (e.g., OSV references and vendor advisories). The known public statement: vulnerable component is gThumb’s JPEG handling; root cau...