Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
gdk-pixbuf2 may crash when loading certain JPEG files
published 5 months ago
Summary
The gdk-pixbuf2 library used in CentOS can run out of memory and stop working if it processes a specially crafted JPEG image. This could cause applications that display images to stop responding or restart unexpectedly. Update the gdk-pixbuf2 packages to the latest version to prevent the issue.
What to do
- Update centos gdk-pixbuf2 to version 2.36.12-3.el7.tuxcare.els2.
- Update centos gdk-pixbuf2-devel to version 2.36.12-3.el7.tuxcare.els2.
- Update centos gdk-pixbuf2-tests to version 2.36.12-3.el7.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:7 | centos | gdk-pixbuf2 |
< 2.36.12-3.el7.tuxcare.els2 Fix: upgrade to 2.36.12-3.el7.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | gdk-pixbuf2-devel |
< 2.36.12-3.el7.tuxcare.els2 Fix: upgrade to 2.36.12-3.el7.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | gdk-pixbuf2-tests |
< 2.36.12-3.el7.tuxcare.els2 Fix: upgrade to 2.36.12-3.el7.tuxcare.els2
|
Original advisory text
gdk-pixbuf2: Fix of CVE-2026-5201
- CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdk_pixbuf__jpeg_image_load()
References
Timeline
Published21 May 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1779205132 · OSV
Track software like this
Free during beta