Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11

Export CSV
CVE-2025-6199

Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Enterprise Linux Rhel Els
CVE-2004-0753

security flaw

The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Gtk Enterprise Linux
CVE-2004-0782

security flaw

Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).

CVSS 2.0 · 7.5 High EPSS 9.2% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Gtk Enterprise Linux
CVE-2004-0783

security flaw

Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

CVSS 2.0 · 7.5 High EPSS 9.4% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Gtk Enterprise Linux
CVE-2004-0788

security flaw

Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.

CVSS 2.0 · 5.0 Medium EPSS 5.9% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Gtk Enterprise Linux
CVE-2005-2976

security flaw

Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary code via an XPM file with large height, width, and colour values, a different vulnerability than CVE-2005-3186.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Gtk Enterprise Linux
CVE-2005-3186

security flaw

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
Gnome Gtk Redhat
Products
Gdkpixbuf Gtk\+ Enterprise Linux
CVE-2005-2975

security flaw

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a crafted XPM image with a large number of colors.

CVSS 2.0 · 7.8 High EPSS 3.7% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Gtk Enterprise Linux
CVE-2022-48622

gnome: heap memory corruption on gdk-pixbuf

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnome Redhat
Products
Gdkpixbuf Enterprise Linux
CVE-2021-44648

gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Debian Fedoraproject Gnome and 1 more
Products
Debian Linux Fedora Gdkpixbuf and 1 more