CVE-2026-5201

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:10707 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:10708 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:10741 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11325 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11326 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11327 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11328 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11806 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12060 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12061 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12062 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12114 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12115 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16008 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16009 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16030 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16174 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19127 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19210 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19724 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19725 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:25096 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-5201 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2453291 Issue Tracking Third Party Advisory
https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304 Issue Tracking Vendor Advisory
https://lists.debian.org/debian-lts-announce/2026/04/msg00010.html Mailing List Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:10707 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:10708 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:10741 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11325 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11326 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11327 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11328 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:11806 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12060 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12061 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12062 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12114 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:12115 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16008 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16009 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16030 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:16174 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19127 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19210 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19724 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:19725 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:25096 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-5201 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2453291 Issue Tracking Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5201.json Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x86:*
cpe:2.3:o:redhat:enterprise_linux:9.8:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_els:9.8:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.8_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.8:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.2:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.2:*:*:*:*:*:*:*

History

29 Oct 2026, 15:56

Type Values Removed Values Added
CPE cpe:2.3:a:gnome:gdk-pixbuf:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.8:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_els:9.8:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:*:*
cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.0_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.2:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux:10.2:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:x64:*
cpe:2.3:o:redhat:enterprise_linux_for_els:10.2:*:*:*:*:*:arm64:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x86:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.8_s390x:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.8:*:*:*:*:*:*:*
References () https://access.redhat.com/errata/RHSA-2026:16008 - () https://access.redhat.com/errata/RHSA-2026:16008 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:16009 - () https://access.redhat.com/errata/RHSA-2026:16009 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:16030 - () https://access.redhat.com/errata/RHSA-2026:16030 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:16174 - () https://access.redhat.com/errata/RHSA-2026:16174 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:19127 - () https://access.redhat.com/errata/RHSA-2026:19127 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:19210 - () https://access.redhat.com/errata/RHSA-2026:19210 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:19724 - () https://access.redhat.com/errata/RHSA-2026:19724 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:19725 - () https://access.redhat.com/errata/RHSA-2026:19725 - Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2026:25096 - () https://access.redhat.com/errata/RHSA-2026:25096 - Third Party Advisory
References () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5201.json - () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5201.json - Third Party Advisory
First Time Redhat enterprise Linux Els
Redhat enterprise Linux Eus
Redhat enterprise Linux For Power Little Endian Eus
Redhat enterprise Linux For Ibm Z Systems
Redhat enterprise Linux For Power Little Endian Els
Redhat enterprise Linux For Power Little Endian
Redhat enterprise Linux Update Services For Sap Solutions
Redhat enterprise Linux For Ibm Z Systems Els
Redhat ai Inference Server
Redhat enterprise Linux For Els
Redhat enterprise Linux For Ibm Z Systems Eus
Redhat enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
Redhat enterprise Linux Aus
Redhat enterprise Linux Tus

Information

Published : 2026-03-31 09:16

Updated : 2026-10-29 15:56


NVD link : CVE-2026-5201

Mitre link : CVE-2026-5201

CVE.ORG link : CVE-2026-5201


JSON object : View

Products Affected

gnome

  • gdk-pixbuf

redhat

  • enterprise_linux_for_ibm_z_systems
  • enterprise_linux_for_power_little_endian_eus
  • enterprise_linux_aus
  • enterprise_linux_for_power_little_endian_els
  • enterprise_linux_eus
  • ai_inference_server
  • enterprise_linux_tus
  • enterprise_linux_for_ibm_z_systems_els
  • enterprise_linux_server_aus
  • enterprise_linux
  • enterprise_linux_els
  • enterprise_linux_update_services_for_sap_solutions
  • enterprise_linux_for_ibm_z_systems_eus
  • enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
  • enterprise_linux_server_tus
  • enterprise_linux_for_els
  • enterprise_linux_for_power_little_endian
CWE
CWE-122

Heap-based Buffer Overflow