Search for packages
| purl | pkg:deb/debian/gdk-pixbuf@2.36.5-2%2Bdeb9u2 |
| Next non-vulnerable version | 2.44.6+dfsg-2 |
| Latest non-vulnerable version | 2.44.6+dfsg-2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1ytk-9srj-zfff
Aliases: CVE-2017-2870 |
gdk-pixbuf2: Integer overflow in tiff_image_parse function |
Affected by 7 other vulnerabilities. |
|
VCID-2a49-ryer-vkhd
Aliases: CVE-2021-44648 |
Out-of-bounds Write GNOME gdk-pixbuf is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals `12` |
Affected by 3 other vulnerabilities. |
|
VCID-37b2-h2nn-ufa8
Aliases: CVE-2017-6313 |
Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
Affected by 7 other vulnerabilities. |
|
VCID-4jf2-xww4-mfau
Aliases: CVE-2017-6312 |
Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
Affected by 7 other vulnerabilities. |
|
VCID-4zm2-zv71-jfat
Aliases: CVE-2020-29385 |
A vulnerability in GDK-PixBuf library could lead to a Denial of Service condition. |
Affected by 3 other vulnerabilities. |
|
VCID-7cp9-37h3-tkhq
Aliases: CVE-2017-6314 |
Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
Affected by 7 other vulnerabilities. |
|
VCID-juwv-p63q-8ffy
Aliases: CVE-2021-46829 |
gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files |
Affected by 3 other vulnerabilities. |
|
VCID-jzz2-x2gk-8kf1
Aliases: CVE-2025-7345 |
gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf |
Affected by 1 other vulnerability. |
|
VCID-pf79-yf2z-syem
Aliases: CVE-2022-48622 |
Out-of-bounds Write In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c. |
Affected by 3 other vulnerabilities. |
|
VCID-q8wp-65d8-yqcr
Aliases: CVE-2017-6311 |
Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
Affected by 7 other vulnerabilities. |
|
VCID-vcfh-3p9e-4uc3
Aliases: CVE-2021-20240 |
gdk-pixbuf: integer wraparound in the GIF loader of gdk-pixbuf via crafted input leads to segmentation fault |
Affected by 3 other vulnerabilities. |
|
VCID-xg3j-c698-3kgu
Aliases: CVE-2025-6199 |
gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder |
Affected by 1 other vulnerability. |
|
VCID-y1sm-7uec-1bc5
Aliases: CVE-2017-2862 |
security update |
Affected by 7 other vulnerabilities. |
|
VCID-zu3p-941y-nydy
Aliases: CVE-2017-1000422 |
A vulnerability has been found in GDK-PixBuf that may allow a remote attacker to execute arbitrary code. |
Affected by 7 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-7hwy-9gdx-rya8 | gdk-pixbuf: heap-based overflow caused by invalid palette size |
CVE-2017-12447
|
| VCID-drq5-6jps-skax | Multiple vulnerabilities have been found in Firefox, Thunderbird, Network Security Services (NSS), and NetScape Portable Runtime (NSPR) with the worst of which may allow remote execution of arbitrary code. |
CVE-2015-4491
|
| VCID-hfkx-cat3-puf8 | gdk-pixbuf: Out-of-bounds write in OneLine32() function |
CVE-2016-6352
|
| VCID-k2ph-py3f-aycu | Multiple buffer overflow vulnerabilities in gdk-pixbuf may allow remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2015-7673
|
| VCID-ku5p-8cre-xkee | security update |
CVE-2015-8875
|
| VCID-qwv5-ntpt-mbbp | Multiple buffer overflow vulnerabilities in gdk-pixbuf may allow remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2015-7674
|
| VCID-rzj1-83cd-4yer | security update |
CVE-2015-7552
|
| VCID-y1sm-7uec-1bc5 | security update |
CVE-2017-2862
|
| VCID-zu3p-941y-nydy | A vulnerability has been found in GDK-PixBuf that may allow a remote attacker to execute arbitrary code. |
CVE-2017-1000422
|