Summary
It was discovered that GDK-Pixbuf incorrectly handled certain
GIF files. An attacker could possibly use this issue to expose
sensitive information. This issue only affected Ubuntu 25.04,
Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2025-6199)
It was discovered that GDK-Pixbuf incorrectly handled certain JPEG files.
An attacker could possibly use this issue to cause a crash or execute
arbitrary code. (CVE-2025-7345)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gdk-pixbuf | 2.42.8+dfsg-1ubuntu0.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | gdk-pixbuf | 2.42.10+dfsg-3ubuntu3.2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gdk-pixbuf | 2.32.2-1ubuntu1.6+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gdk-pixbuf | 2.36.11-2ubuntu0.1~esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.5+esm1 |
Vulnerabilities 2
-
High 7.5
Gdk‑pixbuf: heap‑buffer‑overflow in gdk‑pixbuf
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, al…
-
Low 3.3
Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder
A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error res…