Homepage

Heap-based Buffer Overflow The advisory has been revoked - it doesn't affect any version of package gdk-pixbuf2-devel  (opens in a new tab)

Threat Intelligence

Exploit Maturity
Proof of Concept
EPSS
1.15% (67th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-GDKPIXBUF2DEVEL-15887933
  • published4 Apr 2026
  • disclosed31 Mar 2026
Report a new vulnerability Found a mistake?

Introduced: 31 Mar 2026

CVE-2026-5201  (opens in a new tab)
CWE-122  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gdk-pixbuf2-devel package and not the gdk-pixbuf2-devel package as distributed by RHEL.

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

References