Description
A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 rpm rhel9 | | - | - |
 debian 13 | | =2.42.12+dfsg-4 || =2.42.12+dfsg-4+deb13u1 || =2.42.12+dfsg-5 || =2.44.3+dfsg-1 || =2.44.3+dfsg-2 || =2.44.3+dfsg-3 || =2.44.4+dfsg-1 || =2.44.4+dfsg-2 || =2.44.4+dfsg-3 || =2.44.5+dfsg-1 || =2.44.5+dfsg-2 || =2.44.5+dfsg-3 || =2.44.5+dfsg-4 || =2.44.6+dfsg-1 || =2.44.6+dfsg-2 || =2.44.7+dfsg-1 || =2.44.8+dfsg-1 | - |
debian 14 | | =2.42.12+dfsg-4 || =2.42.12+dfsg-5 || =2.44.3+dfsg-1 || =2.44.3+dfsg-2 || =2.44.3+dfsg-3 || =2.44.4+dfsg-1 || =2.44.4+dfsg-2 || =2.44.4+dfsg-3 || =2.44.5+dfsg-1 || =2.44.5+dfsg-2 || =2.44.5+dfsg-3 || =2.44.5+dfsg-4 || =2.44.6+dfsg-1 || =2.44.6+dfsg-2 || =2.44.7+dfsg-1 || >=0 <2.44.8+dfsg-1 | 2.44.8+dfsg-1 |
debian 12 | | =2.42.10+dfsg-1 || =2.42.10+dfsg-1+deb12u1 || =2.42.10+dfsg-1+deb12u2 || =2.42.10+dfsg-1+deb12u3 || =2.42.10+dfsg-1+deb12u4 || =2.42.10+dfsg-2 || =2.42.10+dfsg-3 || =2.42.12+dfsg-1 || =2.42.12+dfsg-2 || =2.42.12+dfsg-3 || =2.42.12+dfsg-4 || =2.42.12+dfsg-5 || =2.44.3+dfsg-1 || =2.44.3+dfsg-2 || =2.44.3+dfsg-3 || =2.44.4+dfsg-1 || =2.44.4+dfsg-2 || =2.44.4+dfsg-3 || =2.44.5+dfsg-1 || =2.44.5+dfsg-2 || =2.44.5+dfsg-3 || =2.44.5+dfsg-4 || =2.44.6+dfsg-1 || =2.44.6+dfsg-2 || =2.44.7+dfsg-1 || =2.44.8+dfsg-1 | - |
rpm rhel10 | | - | - |
rpm rhel8 | | - | - |
rpm rhel7 | | - | - |
