Summary
USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the
corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS.
Original advisory details:
It was discovered that GDK-PixBuf incorrectly handled certain JPEG files.
An attacker could use this issue to cause GDK-PixBuf to crash, resulting
in a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gdk-pixbuf | 2.32.2-1ubuntu1.6+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gdk-pixbuf | 2.36.11-2ubuntu0.1~esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gdk-pixbuf | 2.40.0+dfsg-3ubuntu0.5+esm3 |
Vulnerabilities 1
-
High 7.5CVE-2026-5201 Public exploit
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this f…
References
-
report
https://ubuntu.com/security/CVE-2026-5201