CVE-2026-81893

A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write, potentially crashing the application. To exploit this flaw, an application using gdk-pixbuf must process the malicious JPEG image.

Affected version >= 2.26.4

Red Hat Product Security has rated this issue as having Moderate security impact. A fix is available upstream in gdk-pixbuf master; a release containing the fix is pending.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid opening or automatically indexing untrusted JPEG images with applications linked against a vulnerable gdk-pixbuf version until an updated package is installed.