Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-5201 Details

Description

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: redhat-SADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://access.redhat.com/errata/RHSA-2026:10707 redhat-SADPThird Party Advisory
https://access.redhat.com/errata/RHSA-2026:10708 redhat-SADPThird Party Advisory
https://access.redhat.com/errata/RHSA-2026:10741 redhat-SADPThird Party Advisory
https://access.redhat.com/errata/RHSA-2026:11325 redhat-SADPThird Party Advisory
https://access.redhat.com/errata/RHSA-2026:11326 redhat-SADPThird Party Advisory

see all 51 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-122Heap-based Buffer Overflowredhat-SADP
CWE-122Heap-based Buffer Overflow[email protected]

Affected Products

ProductVersions
gnome gdk-pixbuf
All versions

CPE

  • cpe:2.3:a:gnome:gdk-pixbuf:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
redhat enterprise linux
7.0
8.0
9.0
10.0

CPE

  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
redhat enterprise linux server aus
8.2
8.4

CPE

  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
redhat enterprise linux server tus
8.8

CPE

  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

21 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-5201
NVD Published Date:
Mar 31, 2026
NVD Last Modified:
Jul 15, 2026
Source:
[email protected]
CVE-2026-5201 Details - Not Deferred