PT-2026-29206 · Unknown+3 · Gdk-Pixbuf+3

Kağan Çapar · Published 2026-03-30 · Updated 2026-05-21 · CVE-2026-5201

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions gdk-pixbuf (affected versions not specified)

Description A flaw exists in the gdk-pixbuf library within the JPEG image loader. This heap-based buffer overflow occurs due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, such as through thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

ALSA-2026:10707

ALSA-2026:10708

ALSA-2026:10741

BDU:2026-04974

CVE-2026-5201

ECHO-2FD9-B31C-16DF

OESA-2026-1894

OESA-2026-1895

OESA-2026-1896

OESA-2026-1897

OESA-2026-1898

OPENSUSE-SU-2026:20558-1

RHSA-2026:10707

RHSA-2026:10708

RHSA-2026:10741

RHSA-2026:11325

RHSA-2026:11326

RHSA-2026:11327

RHSA-2026:11328

RHSA-2026:11806

RHSA-2026:12060

RHSA-2026:12061

RHSA-2026:12062

RHSA-2026:12114

RHSA-2026:12115

SUSE-SU-2026:1430-1

SUSE-SU-2026:1431-1

SUSE-SU-2026:1539-1

SUSE-SU-2026:1576-1

SUSE-SU-2026:21209-1

SUSE-SU-2026:21230-1

USN-8156-1

Affected Products

Linuxmint

Rocky Linux

Ubuntu

Gdk-Pixbuf

References · 95

• 🔥 https://github.com/kagancapar/CVE-2026-5201 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-5201 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11327 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1539-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-10741.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-5201 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-5201 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:19127 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11325 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1898 · Vendor Advisory
• https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:10708 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:12060 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8156-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:11806 · Vendor Advisory