NetSight
IP …
high7.5

CVE-2026-5201

A flaw was found in the gdk-pixbuf library.

Impact

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Affected products

VendorProductAffected versions
GnomeGdk-Pixbuf
before 2.44.6
RedhatAi Inference Server
before 3.3.3
RedhatEnterprise Linux
Versions 7.0, 8.0, 9.0, 10.0, 9.8, 10.2
RedhatEnterprise Linux Aus
Versions 8.2, 8.4, 8.6
RedhatEnterprise Linux Els
Version 7.0
RedhatEnterprise Linux Eus
Versions 8.4, 9.4, 9.6, 10.0, 9.8, 10.2
RedhatEnterprise Linux Server Aus
Versions 8.2, 8.4
RedhatEnterprise Linux Server Tus
Version 8.8
RedhatEnterprise Linux Tus
Versions 8.6, 8.8
RedhatEnterprise Linux Update Services For Sap Solutions
Versions 8.6, 8.8, 9.0, 9.2
RedhatEnterprise Linux For Els
Versions 9.8, 10.2
RedhatEnterprise Linux For Ibm Z Systems
Versions 9.0_s390x, 9.8_s390x, 10.0_s390x, 10.2

Weakness classification

CWE-122

References