Skip to content
OpenAdvisories
Low · 3.6 CVE-2026-118475 EUVD-2026-113476GHSA-v5xr-7mrg-cxwj

Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk

Published Oct 30, 2026 · Updated Nov 6, 2026 · Assigned by redhat

Description

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the application to read past the allocated buffer. This issue can lead to an application crash, resulting in a Denial of Service (DoS), or potentially expose sensitive memory contents.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 eog 50.4-1 —
Debian 13 eog 47.0-1+deb13u1 —
Debian 12 eog 43.2-1+deb12u1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 eog No fix yet —
Ubuntu 26.04 LTS eog No fix yet —
Ubuntu 24.04 LTS eog No fix yet —
Ubuntu 22.04 LTS eog No fix yet —
Ubuntu 20.04 LTS eog No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS eog No fix yet —
Ubuntu 16.04 LTS eog No fix yet —

References