Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-5201: A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | gdk-pixbuf2 | 0:2.36.12-3.amzn2.0.3 |
| Amazon Linux · 2 | gdk-pixbuf2-debuginfo | 0:2.36.12-3.amzn2.0.3 |
| Amazon Linux · 2 | gdk-pixbuf2-devel | 0:2.36.12-3.amzn2.0.3 |
| Amazon Linux · 2 | gdk-pixbuf2-tests | 0:2.36.12-3.amzn2.0.3 |
Vulnerabilities 1
-
High 7.5CVE-2026-5201 Public exploit
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this f…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-5201.html