CVE-2026-81893 - Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery
Brief
CVE ID : CVE-2026-81893
Published : Aug. 27, 2026, 8:18 p. m.
- 55 minutes ago
Description : A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application.
To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image.
Affected version = 2.
- 4
Severity: 4.7
- MEDIUM