GD
Product
gdk-pixbuf
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 4Low 0
Watch
Add gdk-pixbuf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-2897 | 9.8 | Nov 12 | gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw Affected: through 2.31.1 |
| CVE-2021-20240 | 8.8 | May 28 | A flaw was found in gdk-pixbuf in versions before 2.42.0 Affected: before 2.39.2 |
| CVE-2017-1000422 | 8.8 | Jan 2 | Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution Affected: through 2.36.8 |
| CVE-2021-46829 | 7.8 | Jul 24 | GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c… Affected: before 2.42.8 |
| CVE-2017-12447 | 7.8 | Mar 7 | GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have… Affected: 2.32.2 |
| CVE-2017-2870 | 7.8 | Sep 5 | An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang Affected: 2.36.6 |
| CVE-2017-2862 | 7.8 | Sep 5 | An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6 Affected: 2.36.6 |
| CVE-2015-8875 | 7.8 | Jun 1 | Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1… Affected: through 2.33 |
| CVE-2026-5201 | 7.5 | Mar 31 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image Affected: All versions, or not specified |
| CVE-2017-6311 | 7.5 | Mar 10 | gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to… Affected: before 2.36.8 |
| CVE-2016-6352 | 7.5 | Oct 3 | The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an… Affected: through 2.35.2 |
| CVE-2017-6313 | 7.1 | Mar 10 | Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash)… Affected: before 2.36.12 |
| CVE-2020-29385 | 5.5 | Dec 26 | GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes Affected: after 2.39.2 before 2.42.2 |
| CVE-2017-6314 | 5.5 | Mar 10 | The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite loop) via a large TIFF file Affected: before 2.36.12 |
| CVE-2017-6312 | 5.5 | Mar 10 | Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry… Affected: before 2.36.12 |
| CVE-2026-16768 | 5.3 | Jul 23 | Gdk-pixbuf: out-of-bounds read in ico parser Affected: All versions, or not specified |
| CVE-2015-7674 | – | Oct 26 | Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and… Affected: through 2.32.0 |
| CVE-2015-7673 | – | Oct 26 | io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and… Affected: through 2.31.4 |
| CVE-2015-4491 | – | Aug 16 | Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on… Affected: through 2.31.4 |
| CVE-2012-2370 | – | Aug 13 | Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash)… Affected: through 2.26.0; 2.23.3; 2.23.4; 2.23.5; 2.24.0; 2.24.1; +2 more |
| CVE-2011-2485 | – | Jul 3 | The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values, which allows remote attackers to cause a… Affected: through 2.23.3; 2.22.1 |
Showing 21