Description
An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-1100-1 | gdk-pixbuf security update |
Debian DSA |
DSA-3978-1 | gdk-pixbuf security update |
EUVD |
EUVD-2017-12003 | An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. |
Ubuntu USN |
USN-3418-1 | GDK-PixBuf vulnerabilities |
References
History
Sun, 13 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2024-09-16T22:30:21.047Z
Reserved: 2016-12-01T00:00:00.000Z
Link: CVE-2017-2862
No data.
Status : Modified
Published: 2017-09-05T18:29:00.507
Modified: 2026-05-13T00:24:29.033
Link: CVE-2017-2862
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
EUVD
Ubuntu USN