Summary
It was discovered that GDK-PixBuf incorrectly handled certain JPEG files.
An attacker could use this issue to cause GDK-PixBuf to crash, resulting in
a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gdk-pixbuf | 2.42.8+dfsg-1ubuntu0.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | gdk-pixbuf | 2.42.10+dfsg-3ubuntu3.3 |
| Ubuntu · 25.10 | gdk-pixbuf | 2.42.12+dfsg-5ubuntu0.1 |
Vulnerabilities 1
-
High 7.5CVE-2026-5201 Public exploit
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this f…
References
-
report
https://ubuntu.com/security/CVE-2026-5201