CVE-2026-5201

Description

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

References

• Advisories
• More

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS