CVE-2026-5201
Severity
High
CVSS score
7.5Package
gdk-pixbufAffected versions
>= 2.42.12+dfsg-4, < 2.42.12+dfsg-4+e1A flaw exists in the gdk-pixbuf library. This vulnerability, a heap-based buffer overflow, occurs in the JPEG image loader due to inadequate validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this vulnerability without user interaction, such as through thumbnail generation. Successful exploitation may result in application crashes and denial of service (DoS) conditions.