Search/CVE-2026-5201
● CVE — High

CVE-2026-5201

Vendorredhat, gnomeProductenterprise linux, enterprise linux eus, enterprise linux for ibm z systems, enterprise linux for ibm z systems eus, enterprise linux for power little endian, enterprise linux for power little endian eus, enterprise linux server aus, enterprise linux server for power little endian update services for sap solutions, enterprise linux server tus, enterprise linux update services for sap solutions, gdk-pixbuf, enterprise linux aus, enterprise linux tus, ai inference server, enterprise linux for els, enterprise linux for ibm z systems els, enterprise linux for power little endian els, enterprise linux elsDiscoveredMar 31, 2026UpdatedOct 29, 2026

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

CVSS v3.1
7.5 HIGH
EPSS
1.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Mar 31, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 29, 2026
Public PoC (1)
Unverified third-party code — review before executing.