7.5
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux 10: от 0:2.42.12-4.el10_1.5 нататък
- Red Hat Red Hat Enterprise Linux 10: от 0:2.42.12-4.el10_2.5 нататък
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: от 0:2.42.12-4.el10_0.4 нататък
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: от 0:2.36.12-5.el7_9 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:2.36.12-8.el8_10 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:2.36.12-8.el8_10 нататък
- Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: от 0:2.36.12-7.el8_2 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: от 0:2.36.12-7.el8_4 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: от 0:2.36.12-7.el8_4 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: от 0:2.36.12-7.el8_6 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: от 0:2.36.12-7.el8_6 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions: от 0:2.36.12-7.el8_6 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: от 0:2.36.12-7.el8_8 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: от 0:2.36.12-7.el8_8 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:2.42.6-6.el9_7.1 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:2.42.6-6.el9_8.1 нататък
- Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions: от 0:2.42.6-3.el9_0.1 нататък
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: от 0:2.42.6-4.el9_2.1 нататък
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: от 0:2.42.6-5.el9_4.1 нататък
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: от 0:2.42.6-6.el9_6.1 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1779223654 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1779223651 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1780681984 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244559 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244531 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778274666 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244546 нататък
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 9
Вид слабост
История
- 31 март 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux 10
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-5201
- https://nvd.nist.gov/vuln/detail/CVE-2026-5201
- https://access.redhat.com/errata/RHSA-2026:10707
- https://access.redhat.com/errata/RHSA-2026:10708
- https://access.redhat.com/errata/RHSA-2026:10741
- https://access.redhat.com/errata/RHSA-2026:11325
- https://access.redhat.com/errata/RHSA-2026:11326
- https://access.redhat.com/errata/RHSA-2026:11327
- https://access.redhat.com/errata/RHSA-2026:11328
- https://access.redhat.com/errata/RHSA-2026:11806
- https://access.redhat.com/errata/RHSA-2026:12060
- https://access.redhat.com/errata/RHSA-2026:12061
- https://access.redhat.com/errata/RHSA-2026:12062
- https://access.redhat.com/errata/RHSA-2026:12114
- https://access.redhat.com/errata/RHSA-2026:12115
- https://access.redhat.com/errata/RHSA-2026:16008
- https://access.redhat.com/errata/RHSA-2026:16009
- https://access.redhat.com/errata/RHSA-2026:16030
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:19127
- https://access.redhat.com/errata/RHSA-2026:19210
- https://access.redhat.com/errata/RHSA-2026:19724
- https://access.redhat.com/errata/RHSA-2026:19725
- https://access.redhat.com/errata/RHSA-2026:25096
- https://access.redhat.com/security/cve/CVE-2026-5201
- https://bugzilla.redhat.com/show_bug.cgi?id=2453291
- https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304
- https://lists.debian.org/debian-lts-announce/2026/04/msg00010.html
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5201.json