Summary
It was discovered that GNOME Shell did not properly validate icon
dimensions when processing icons from a remote search provider. An
attacker could possibly use this issue to cause GNOME Shell to crash,
resulting in a denial of service, or expose sensitive information from
memory.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gnome-shell | 42.9-0ubuntu2.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | gnome-shell | 46.0-0ubuntu6~24.04.17 |
| Ubuntu · 26.04 LTS 26.04:LTS | gnome-shell | 50.1-0ubuntu1.5 |
Vulnerabilities 1
-
Medium 6.1
Gnome-shell: gnome-shell: out-of-bounds read in remote search icon rendering due to unvalidated icon-data buffer size
A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit th…
References
-
report
https://ubuntu.com/security/CVE-2026-91786