← CVE Intelligence

CVE-2026-5201

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image PUBLISHED

Description (CNA)

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.42.12-4.el10_1.5 before *
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.42.12-4.el10_2.5 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:2.42.12-4.el10_0.4 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:2.36.12-5.el7_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.36.12-8.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.36.12-8.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:2.36.12-7.el8_2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:2.36.12-7.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:2.36.12-7.el8_4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:2.36.12-7.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:2.36.12-7.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:2.36.12-7.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:2.36.12-7.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:2.36.12-7.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.42.6-6.el9_7.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.42.6-6.el9_8.1 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:2.42.6-3.el9_0.1 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.42.6-4.el9_2.1 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:2.42.6-5.el9_4.1 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:2.42.6-6.el9_6.1 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1779223654 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1779223651 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1780681984 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1778244559 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1778244531 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1778274666 before *
Red Hat / Red Hat AI Inference Server 3.3unaffected 1778244546 before *
Red Hat / Red Hat Enterprise Linux 10unaffected
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 10unaffected
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 9unaffected

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

redhat-SADP

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.