GD
Product
gdk-pixbuf
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 4Low 0
Watch
Add gdk-pixbuf to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-20240 | 8.8 | May 28 | A flaw was found in gdk-pixbuf in versions before 2.42.0 Affected: before 2.39.2 |
| CVE-2017-1000422 | 8.8 | Jan 2 | Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execution Affected: through 2.36.8 |
| CVE-2021-46829 | 7.8 | Jul 24 | GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c… Affected: before 2.42.8 |
| CVE-2017-12447 | 7.8 | Mar 7 | GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have… Affected: 2.32.2 |
| CVE-2017-2870 | 7.8 | Sep 5 | An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang Affected: 2.36.6 |
| CVE-2017-2862 | 7.8 | Sep 5 | An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6 Affected: 2.36.6 |
| CVE-2015-8875 | 7.8 | Jun 1 | Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1… Affected: through 2.33 |
| CVE-2026-5201 | 7.5 | Mar 31 | Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image Affected: All versions, or not specified |
| CVE-2017-6311 | 7.5 | Mar 10 | gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to… Affected: before 2.36.8 |
| CVE-2016-6352 | 7.5 | Oct 3 | The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an… Affected: through 2.35.2 |
| CVE-2017-6313 | 7.1 | Mar 10 | Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (out-of-bounds read and program crash)… Affected: before 2.36.12 |
Showing 11