Dashboard / CVE-2026-5201

CVE-2026-5201

1 PoC
INFO Priority: 0.00 BB Relevance: 10/100
Published: 2026-03-31 Modified: 2026-10-29 First seen: 2026-10-29 Status: pending_score

Description

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Weakness Classification (1)

Affected Software (53)

VendorProductVersion
gnome gdk-pixbuf < 2.44.6
redhat ai_inference_server < 3.3.3
redhat enterprise_linux 7.0
redhat enterprise_linux 8.0
redhat enterprise_linux 9.0
redhat enterprise_linux 10.0
redhat enterprise_linux 9.0
redhat enterprise_linux 9.0
redhat enterprise_linux 9.8
redhat enterprise_linux 10.0
redhat enterprise_linux 10.0
redhat enterprise_linux 10.2
redhat enterprise_linux 10.2
redhat enterprise_linux_aus 8.2
redhat enterprise_linux_aus 8.4
redhat enterprise_linux_aus 8.6
redhat enterprise_linux_els 7.0
redhat enterprise_linux_eus 8.4
redhat enterprise_linux_eus 9.4
redhat enterprise_linux_eus 9.6
redhat enterprise_linux_eus 10.0
redhat enterprise_linux_eus 9.8
redhat enterprise_linux_eus 9.8
redhat enterprise_linux_eus 10.2
redhat enterprise_linux_eus 10.2
redhat enterprise_linux_for_els 9.8
redhat enterprise_linux_for_els 10.2
redhat enterprise_linux_for_els 10.2
redhat enterprise_linux_for_ibm_z_systems 9.0_s390x
redhat enterprise_linux_for_ibm_z_systems 9.8_s390x
Showing 30 of 53 entries

References & Advisories (27)

Showing 25 of 27 references

Proof of Concept (1)

★ 13
https://github.com/kagancapar/CVE-2026-5201
nomi-sec

Bug Bounty Relevance

10 / 100
✓ PoC available (1)

CVSS Score

Unscored

EPSS — Exploitation Probability

1.09%
Raw Score 0.010880
Percentile 65.2%
Date 2026-10-29

Intelligence Sources

nvd ref →

External Links