CVE-2026-107651 — Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader

CVE-2026-107651

Eog: eog: arbitrary code execution via heap buffer overflow in png metadata reader PUBLISHED

Description (CNA)

A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.

Affected (CNA)

Vendor / product	Versions
Red Hat / Red Hat Enterprise Linux 6	affected
Red Hat / Red Hat Enterprise Linux 7	affected
Red Hat / Red Hat Enterprise Linux 8	affected
Red Hat / Red Hat Enterprise Linux 9	affected

CWE

CWE-122

References

https://access.redhat.com/security/cve/CVE-2026-107651
https://bugzilla.redhat.com/show_bug.cgi?id=2547986

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.