Search for packages
| purl | pkg:deb/debian/gdk-pixbuf@2.42.2%2Bdfsg-1%2Bdeb11u2?distro=trixie |
| Next non-vulnerable version | 2.42.2+dfsg-1+deb11u3 |
| Latest non-vulnerable version | 2.44.6+dfsg-2 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-xg6z-9vh5-pbd6
Aliases: CVE-2026-5201 |
gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image |
Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1jyr-kac3-2ua2 | The GdkPixbuf library, that is also included in GTK+ 2, contains vulnerabilities that could lead to a Denial of Service or the execution of arbitrary code. |
CVE-2005-2976
|
| VCID-1ytk-9srj-zfff | gdk-pixbuf2: Integer overflow in tiff_image_parse function |
CVE-2017-2870
|
| VCID-2a49-ryer-vkhd | Out-of-bounds Write GNOME gdk-pixbuf is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals `12` |
CVE-2021-44648
|
| VCID-37b2-h2nn-ufa8 | Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
CVE-2017-6313
|
| VCID-3vjs-geuw-j7h7 | The GdkPixbuf library, that is also included in GTK+ 2, contains vulnerabilities that could lead to a Denial of Service or the execution of arbitrary code. |
CVE-2005-2975
|
| VCID-4jf2-xww4-mfau | Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
CVE-2017-6312
|
| VCID-4zm2-zv71-jfat | A vulnerability in GDK-PixBuf library could lead to a Denial of Service condition. |
CVE-2020-29385
|
| VCID-7cp9-37h3-tkhq | Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
CVE-2017-6314
|
| VCID-7hwy-9gdx-rya8 | gdk-pixbuf: heap-based overflow caused by invalid palette size |
CVE-2017-12447
|
| VCID-d5bq-uv1h-rqa8 | gdk-pixbuf: GIF loader buffer overflow when initializing decompression tables |
CVE-2011-2897
|
| VCID-drq5-6jps-skax | Multiple vulnerabilities have been found in Firefox, Thunderbird, Network Security Services (NSS), and NetScape Portable Runtime (NSPR) with the worst of which may allow remote execution of arbitrary code. |
CVE-2015-4491
|
| VCID-ecuv-xp49-5yeh | The GdkPixbuf library, that is also included in GTK+ 2, contains vulnerabilities that could lead to a Denial of Service or the execution of arbitrary code. |
CVE-2005-3186
|
| VCID-epbu-y9uy-83bs | security flaw |
CVE-2004-0782
|
| VCID-hfkx-cat3-puf8 | gdk-pixbuf: Out-of-bounds write in OneLine32() function |
CVE-2016-6352
|
| VCID-juwv-p63q-8ffy | gdk-pixbuf: heap-based buffer overflow when compositing or clearing frames in GIF files |
CVE-2021-46829
|
| VCID-juz2-dgbr-4bd7 | security flaw |
CVE-2005-0891
|
| VCID-jzz2-x2gk-8kf1 | gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf |
CVE-2025-7345
|
| VCID-k2ph-py3f-aycu | Multiple buffer overflow vulnerabilities in gdk-pixbuf may allow remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2015-7673
|
| VCID-ku5p-8cre-xkee | security update |
CVE-2015-8875
|
| VCID-pf79-yf2z-syem | Out-of-bounds Write In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c. |
CVE-2022-48622
|
| VCID-q8wp-65d8-yqcr | Multiple vulnerabilities have been found in GDK-PixBuf, the worst of which could result in the execution of arbitrary code. |
CVE-2017-6311
|
| VCID-qwv5-ntpt-mbbp | Multiple buffer overflow vulnerabilities in gdk-pixbuf may allow remote attackers to execute arbitrary code or cause Denial of Service. |
CVE-2015-7674
|
| VCID-rzj1-83cd-4yer | security update |
CVE-2015-7552
|
| VCID-syr2-zvtz-f3au | Multiple vulnerabilities in gdk-pixbuf may create a Denial of Service condition. |
CVE-2012-2370
|
| VCID-v9xs-ur2x-jygb | Multiple vulnerabilities were found in Pidgin, the worst of which allowing for the remote execution of arbitrary code. |
CVE-2011-2485
|
| VCID-vcfh-3p9e-4uc3 | gdk-pixbuf: integer wraparound in the GIF loader of gdk-pixbuf via crafted input leads to segmentation fault |
CVE-2021-20240
|
| VCID-wrze-mrwx-nfdv | security flaw |
CVE-2004-0111
|
| VCID-xg3j-c698-3kgu | gdk-pixbuf: Uninitialized Memory Disclosure in GdkPixbuf GIF LZW Decoder |
CVE-2025-6199
|
| VCID-xg6z-9vh5-pbd6 | gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image |
CVE-2026-5201
|
| VCID-y1dx-tg6t-aqe4 | security flaw |
CVE-2004-0788
|
| VCID-y1sm-7uec-1bc5 | security update |
CVE-2017-2862
|
| VCID-ysbh-ym55-nkbh | security flaw |
CVE-2004-0753
|
| VCID-zu3p-941y-nydy | A vulnerability has been found in GDK-PixBuf that may allow a remote attacker to execute arbitrary code. |
CVE-2017-1000422
|