Most recent entries from all

CVE-2025-6199 — Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

Affected: gdk-pixbuf, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.

USN-7662-1 — gdk-pixbuf vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: gdk-pixbuf, Ubuntu:Pro:18.04:LTS: gdk-pixbuf, Ubuntu:Pro:20.04:LTS: gdk-pixbuf, Ubuntu:22.04:LTS: gdk-pixbuf, Ubuntu:24.04:LTS: gdk-pixbuf

It was discovered that GDK-Pixbuf incorrectly handled certain GIF files. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-6199)

It was discovered that GDK-Pixbuf incorrectly handled certain JPEG files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2025-7345)