CVE-2026-118475

LOW

INFO Priority: 0.00 BB Relevance: 22/100

Published: 2026-10-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

No Auth

CVSS Vector Breakdown

AV: Local

AC: High

PR: None

UI: Required

S: Unchanged

C: Low

I: None

A: Low

Description

A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the application to read past the allocated buffer. This issue can lead to an application crash, resulting in a Denial of Service (DoS), or potentially expose sensitive memory contents.