Summary
[2.36.12-3.0.1]
- jpeg: Be more careful with chunked icc data [Orabug: 38359772][CVE-2025-7345]
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | gdk-pixbuf2 | 0:2.36.12-3.0.1.el7 |
| Oracle Linux · 7 | gdk-pixbuf2-devel | 0:2.36.12-3.0.1.el7 |
| Oracle Linux · 7 | gdk-pixbuf2-tests | 0:2.36.12-3.0.1.el7 |
Vulnerabilities 1
-
High 7.5
Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, al…