https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T19:21:34.677533+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cnvd-2017-31547 cnvd-2017-31547 2026-10-03T19:21:34.910065+00:00 cnvd-2017-31547 https://db.gcve.eu/vuln/fkie_cve-2017-2862 fkie_cve-2017-2862 2026-10-03T19:21:34.910122+00:00

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.

 https://db.gcve.eu/vuln/ghsa-cmxv-cq8h-57g4 GHSA-cmxv-cq8h-57g4 2026-10-03T19:21:34.910167+00:00

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.

 https://db.gcve.eu/vuln/gsd-2017-2862 gsd-2017-2862 2026-10-03T19:21:34.910185+00:00 gsd-2017-2862 https://db.gcve.eu/vuln/opensuse-su-2024:10779-1 openSUSE-SU-2024:10779-1 — gdk-pixbuf-devel-2.42.6-3.2 on GA media 2026-10-03T19:21:34.910198+00:00

gdk-pixbuf-devel-2.42.6-3.2 on GA media

 https://db.gcve.eu/vuln/rhsa-2018:3140 RHSA-2018:3140 — Red Hat Security Advisory: GNOME security, bug fix, and enhancement update 2026-10-03T19:21:34.910222+00:00

freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content webkitgtk: memory corruption processing maliciously crafted web content libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF webkitgtk: Improper TLS certificate verification for WebSocket connections webkitgtk: WebSockets don't use system proxy settings libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames poppler: out of bounds read in pdfunite accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

 https://db.gcve.eu/vuln/suse-su-2017:2381-1 SUSE-SU-2017:2381-1 — Security update for gdk-pixbuf 2026-10-03T19:21:34.910273+00:00

Security update for gdk-pixbuf

 https://db.gcve.eu/vuln/ubuntu-cve-2017-2862 UBUNTU-CVE-2017-2862 2026-10-03T19:21:34.910287+00:00

Affected: Ubuntu:14.04:LTS: gdk-pixbuf, Ubuntu:16.04:LTS: gdk-pixbuf

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.