Vulnerability Details CVE-2026-5201
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 65.2%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-5201
-
cpe:2.3:a:gnome:gdk-pixbuf:-
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.16.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.17.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.18.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.19.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.20.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.21.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.22.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.23.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.24.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.25.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.26.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.27.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.28.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.29.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.30.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.31.7
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.32.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.33.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.34.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.35.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.10
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.11
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.12
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.3
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.5
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.8
-
cpe:2.3:a:gnome:gdk-pixbuf:2.36.9
-
cpe:2.3:a:gnome:gdk-pixbuf:2.37.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.37.92
-
cpe:2.3:a:gnome:gdk-pixbuf:2.38.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.38.1
-
cpe:2.3:a:gnome:gdk-pixbuf:2.38.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.39.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.40.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.42.0
-
cpe:2.3:a:gnome:gdk-pixbuf:2.42.2
-
cpe:2.3:a:gnome:gdk-pixbuf:2.42.4
-
cpe:2.3:a:gnome:gdk-pixbuf:2.42.6
-
cpe:2.3:a:gnome:gdk-pixbuf:2.42.8
-
cpe:2.3:a:redhat:ai_inference_server:-
-
cpe:2.3:a:redhat:ai_inference_server:3.2.0
-
cpe:2.3:a:redhat:ai_inference_server:3.2.1
-
cpe:2.3:a:redhat:ai_inference_server:3.2.2
-
cpe:2.3:a:redhat:ai_inference_server:3.2.3
-
cpe:2.3:a:redhat:ai_inference_server:3.2.4
-
cpe:2.3:a:redhat:ai_inference_server:3.2.5
-
cpe:2.3:a:redhat:ai_inference_server:3.3.0
-
cpe:2.3:a:redhat:ai_inference_server:3.3.1
-
cpe:2.3:o:redhat:enterprise_linux:10.0
-
cpe:2.3:o:redhat:enterprise_linux:10.2
-
cpe:2.3:o:redhat:enterprise_linux:7.0
-
cpe:2.3:o:redhat:enterprise_linux:8.0
-
cpe:2.3:o:redhat:enterprise_linux:9.0
-
cpe:2.3:o:redhat:enterprise_linux:9.8
-
cpe:2.3:o:redhat:enterprise_linux_aus:8.2
-
cpe:2.3:o:redhat:enterprise_linux_aus:8.4
-
cpe:2.3:o:redhat:enterprise_linux_aus:8.6
-
cpe:2.3:o:redhat:enterprise_linux_els:7.0
-
cpe:2.3:o:redhat:enterprise_linux_eus:10.0
-
cpe:2.3:o:redhat:enterprise_linux_eus:10.2
-
cpe:2.3:o:redhat:enterprise_linux_eus:8.4
-
cpe:2.3:o:redhat:enterprise_linux_eus:9.4
-
cpe:2.3:o:redhat:enterprise_linux_eus:9.6
-
cpe:2.3:o:redhat:enterprise_linux_eus:9.8
-
cpe:2.3:o:redhat:enterprise_linux_for_els:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_els:9.8
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.8_s390x
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.8
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.8
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.8
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.2
-
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.8
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
-
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
-
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.8
-
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8
-
cpe:2.3:o:redhat:enterprise_linux_tus:8.6
-
cpe:2.3:o:redhat:enterprise_linux_tus:8.8
-
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6
-
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8
-
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0
-
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2