A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code execution or a Denial of Service (DoS) via application crash.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4874 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4874-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     October 31, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : eog     Version        : 43.2-1+deb12u1     CVE ID         : CVE-2026-107651 CVE-2026-118475     Debian Bug     : 1150455

    Two vulnerabilities were discovered in Eye of GNOME (eog), the     lightweight image viewer:

    CVE-2026-107651

        A heap-based buffer overflow existed in the PNG metadata reader         due to improper state handling when parsing split metadata         chunks. A remote attacker could have exploited this flaw by         enticing a user into opening a specially crafted `.png` file,         potentially leading to arbitrary code execution or a Denial of         Service (DoS) via crashing the application.

    CVE-2026-118475

        When parsing a specially crafted PNG image containing malformed         color profile metadata, *eog* failed to validate chunk boundaries         while searching for a null terminator. An attacker could have         tricked a user into opening a malicious image, causing         the application to read past the allocated buffer. This         issue could also have led to an application crash,         resulting in a Denial of Service (DoS) or potentially         exposing sensitive memory contents.

    For Debian 12 bookworm, these problems have been fixed in version     43.2-1+deb12u1.

    We recommend that you upgrade your eog packages.

    For the detailed security status of eog please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/eog

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c84199fbcd advisory.

    Fix for CVE-2026-107651

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due     to improper state handling when parsing split metadata chunks. A remote attacker could exploit this flaw     by enticing a user into opening a specially crafted PNG file, potentially leading to arbitrary code     execution or a Denial of Service (DoS) via application crash. (CVE-2026-107651)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
374858	Debian dla-4874 : eog - security update	Nessus	Debian Local Security Checks	Local	low
372899	Fedora 43 : eog (2026-c84199fbcd)	Nessus	Fedora Local Security Checks	Local	medium
369113	Linux Distros Unpatched Vulnerability : CVE-2026-107651	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-107651

medium

Tenable Plugins

low

medium

medium