CVE-2026-5201CWE-122

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

High · published March 31, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
68.5
In the wild
Unconfirmed
What it is

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01221 · 68.5th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-03-31T08:32Z
EPSS history
Timeline
  • 31 MAR 08:32Z
    Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
    cvelistv5