Out-of-bounds read In gdk-pixbuf
Description
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib’s g_base64_encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 2.42.2+dfsg-1+deb11u4 | ||
debian 12 | 2.42.10+dfsg-1+deb12u3 | ||
debian 13 | 2.42.12+dfsg-4 | ||
debian 14 | 2.42.12+dfsg-4 | ||
 rpm rhel10 | 0:2.42.12-4.el10_0 | ||
rpm rhel6 | - | - | |
rpm rhel7 | - | - | |
rpm rhel8 | 0:2.36.12-7.el8_10 | ||
rpm rhel8.4 | 0:2.36.12-6.el8_4 | ||
rpm rhel9 | 0:2.42.6-6.el9_6 |
1-10 of 11
10
Aliases
1. 2. 3. 4. 5.