SZB-2bea0cd681
EUVD-2026-113476 flaw reported in Eye of GNOME image viewer (CVSS 3.6)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- GNOME
- Product
- Eye of GNOME
- First seen
Summary
The EUVD entry describes a flaw in Eye of GNOME where a malformed PNG color profile can cause the application to fail chunk-boundary validation while searching for a null terminator. It is scored 3.6 under CVSS v3.1 and requires a user to open a malicious image.
If you use GNOME
Update Eye of GNOME to a patched version when available
Avoid opening PNG images from untrusted sources
Update Epiphany to a release that includes the fix
Avoid clicking through certificate warnings on untrusted sites
Check the GNOME project for the patched version
What the sources say 2
· Mastodon: “A flaw was found in Eye of GNOME.” Source
· Mastodon: “A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page.” Source