gdk-pixbuf vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf prior to 2.26.1 allow remote malicious users to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overf...

Gnome Gdk-pixbuf 2.25.2 Gnome Gdk-pixbuf 2.25.0 Gnome Gdk-pixbuf 2.23.5 Gnome Gdk-pixbuf 2.24.1 Gnome Gdk-pixbuf 2.23.3 Gnome Gdk-pixbuf 2.23.4 Gnome Gdk-pixbuf 2.24.0 Gnome Gdk-pixbuf

4.3

CVSSv2

The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf prior to 2.23.5 does not properly handle certain return values, which allows remote malicious users to cause a denial of service (memory consumption) via a crafted GIF image file.

Gnome Gdk-pixbuf Gnome Gdk-pixbuf 2.22.1

6.8

CVSSv2

io-tga.c in gdk-pixbuf prior to 2.32.0 uses heap memory after its allocation failed, which allows remote malicious users to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.

Opensuse Opensuse 13.2 Gnome Gdk-pixbuf

6.8

CVSSv2

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows malicious users to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

Gnome Nautilus 3.14.3 Gnome Gdk-pixbuf 2.32.2

6.8

CVSSv2

Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf prior to 2.33.1 allow remote malicious users to cause a denial of service (application crash) or possibly execute ...

Gnome Gdk-pixbuf Debian Debian Linux 8.0

6.8

CVSSv2

An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger th...

Gnome Gdk-pixbuf 2.36.6 Debian Debian Linux 8.0

6.8

CVSSv2

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulner...

Gnome Gdk-pixbuf 2.36.6 Debian Debian Linux 8.0

8.3

CVSSv2

A flaw was found in gdk-pixbuf in versions prior to 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat...

Gnome Gdk-pixbuf Fedoraproject Fedora 33 Fedoraproject Fedora 34

5

CVSSv2

gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent malicious users to cause a denial of service (NULL pointer dereference and application crash) via vectors related to printing an error message.

Gnome Gdk-pixbuf Fedoraproject Fedora 30 Fedoraproject Fedora 31

NA

GNOME GdkPixbuf (aka GDK-PixBuf) prior to 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit...

Gnome Gdk-pixbuf Fedoraproject Fedora 35 Debian Debian Linux 11.0

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook