CVE-2026-81893

Received Received - Intake

Out-of-Bounds Write in GDK-PixBuf via Malformed JPEG ICC Profile

Publication date: 2026-08-27

Last updated on: 2026-08-28

Assigner: redhat-SADP

Description

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image. Affected version >= 2.26.4

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-08-28

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-81893

Affected Vendors & Products

Vendor	Product	Version / Range
gnome	gdk_pixbuf	From 2.43.4 (inc)
gnome	gdk_pixbuf	From 2.44.0 (inc)
gnome	gdk_pixbuf	From 2.26.4 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is in the gdk-pixbuf library, which processes images. When a specially crafted JPEG image with chunked ICC profile markers is loaded, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. This leads to an out-of-bounds write during a subsequent allocation, potentially crashing the application.

Detection Guidance

This vulnerability requires processing a malicious JPEG image to trigger. Detection involves scanning for vulnerable gdk-pixbuf versions or monitoring for crashes when processing JPEG files. Check installed versions with 'rpm -q gdk-pixbuf2' or 'dpkg -l libgdk-pixbuf2.0-0'. Monitor application logs for segmentation faults or memory corruption errors during image processing.

Impact Analysis

If you use an application that relies on gdk-pixbuf to process untrusted JPEG images, this flaw could crash the application or allow arbitrary code execution. The impact is limited to systems processing malicious images, with a CVSS score of 4.7 indicating moderate severity.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It primarily causes application crashes or potential arbitrary code execution when processing malicious JPEG images. Compliance impacts would only occur if the vulnerability leads to unauthorized data access or processing disruptions in systems handling sensitive data.

Mitigation Strategies

Avoid processing untrusted JPEG images until an updated package is available. Disable automatic image processing in applications if possible. Monitor vendor advisories for patched versions. Red Hat notes a fix is in the upstream master branch but no release tag exists yet.

Hi! I’m here to help you understand CVE-2026-81893. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70