Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

Summary

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Timeline

1. Mar 31, 2026, 8:32 AM UTCCVE published
2. Mar 31, 2026, 1:45 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Jul 15, 2026, 12:46 AM UTCRecord last updated

Affected versions

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-rocm-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• rhaiis/vllm-rocm-rhel9

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-spyre-rhel9

  Version range not reported

• glycin-loaders

  Version range not reported

• loupe

  Version range not reported

• papers

  Version range not reported

• snapshot

  Version range not reported

• gdk-pixbuf2

  Version range not reported

• librsvg2

  Version range not reported

References 26