CVE-2026-5201High· 7.5▾ MidnightPoC availableA flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attac…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.1%
1 GitHub repo (last check)
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)gdk-pixbuf2 (all versions)rhaiis/vllm-cuda-rhel9 (all versions)rhaiis/vllm-rocm-rhel9 (all versions)rhaiis/model-opt-cuda-rhel9 (all versions)rhaiis/model-opt-cuda-rhel9 (all versions)rhaiis/vllm-rocm-rhel9 (all versions)rhaiis/vllm-cuda-rhel9 (all versions)rhaiis/vllm-spyre-rhel9 (all versions)glycin-loadersloupe (all versions)paperssnapshot (all versions)gdk-pixbuf2librsvg2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To reduce the risk of exploitation, avoid opening or processing untrusted JPEG image files. This operational control helps prevent the automatic triggering of the vulnerability, for example, during thumbnail generation, which could otherwise lead to application instability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-52356High· 7.5Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
CVE-2023-6246High· 8.4Glibc: heap-based buffer overflow in __vsyslog_internal()
CVE-2023-3428Medium· 6.2Imagemagick: heap-buffer-overflow in coders/tiff.c
CVE-2023-43787High· 7.8Libx11: integer overflow in xcreateimage() leading to a heap overflow
CVE-2026-81893Medium· 4.7Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery
CVE-2026-121997High· 8.1Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch