Yüksek CVSS 7.5
CVE-2026-5201: Gdk-pixbuf: yığın (heap) taşması
Açıklama (NVD)
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Özet bilgiler
- Ürün
- Gnome Gdk-pixbuf
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %1,15 (yüzdelik 67)
- CWE
- CWE-122
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| gnome-gdk-pixbuf | — | — | 2.44.6 |
| redhat-ai-inference-server | — | — | 3.3.3 |
| redhat-enterprise-linux | 7.0 | 7.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 10.0 | 10.0 | — |
| redhat-enterprise-linux-aus | 8.2 | 8.2 | — |
| redhat-enterprise-linux-aus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-aus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-els | 7.0 | 7.0 | — |
| redhat-enterprise-linux-eus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-eus | 9.4 | 9.4 | — |
| redhat-enterprise-linux-eus | 9.6 | 9.6 | — |
| redhat-enterprise-linux-eus | 10.0 | 10.0 | — |
| redhat-enterprise-linux-server-aus | 8.2 | 8.2 | — |
| redhat-enterprise-linux-server-aus | 8.4 | 8.4 | — |
| redhat-enterprise-linux-server-tus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-tus | 8.6 | 8.6 | — |
| redhat-enterprise-linux-tus | 8.8 | 8.8 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 8.6 | 8.6 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 8.8 | 8.8 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 9.0 | 9.0 | — |
| redhat-enterprise-linux-update-services-for-sap-solutions | 9.2 | 9.2 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| redhat-enterprise-linux | 9.8 | 9.8 | — |
| redhat-enterprise-linux-eus | 9.8 | 9.8 | — |
| redhat-enterprise-linux-eus | 9.8 | 9.8 | — |
| redhat-enterprise-linux-for-els | 9.8 | 9.8 | — |
| redhat-enterprise-linux-for-ibm-z-systems | 9.0_s390x | 9.0_s390x | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- CWE-122