A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function (io-jpeg.c) and in glib’s gbase64encode_step (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
{ "binaries": [ { "binary_name": "gir1.2-gdkpixbuf-2.0", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "gir1.2-gdkpixbuf-2.0-dbgsym", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-0", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-0-dbg", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-0-dbgsym", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-0-udeb", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-0-udeb-dbgsym", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-common", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-dev", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-dev-dbgsym", "binary_version": "2.32.2-1ubuntu1.6+esm2" }, { "binary_name": "libgdk-pixbuf2.0-doc", "binary_version": "2.32.2-1ubuntu1.6+esm2" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gir1.2-gdkpixbuf-2.0", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-0", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-0-dbgsym", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-0-udeb", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-bin", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-bin-dbgsym", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-common", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-dev", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-dev-dbgsym", "binary_version": "2.36.11-2ubuntu0.1~esm2" }, { "binary_name": "libgdk-pixbuf2.0-doc", "binary_version": "2.36.11-2ubuntu0.1~esm2" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gir1.2-gdkpixbuf-2.0", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-0", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-0-dbgsym", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-0-udeb", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-bin", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-bin-dbgsym", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-common", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-dev", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" }, { "binary_name": "libgdk-pixbuf2.0-doc", "binary_version": "2.40.0+dfsg-3ubuntu0.5+esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "gdk-pixbuf-tests", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "gdk-pixbuf-tests-dbgsym", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "gir1.2-gdkpixbuf-2.0", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf-2.0-0", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf-2.0-0-dbgsym", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf-2.0-dev", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf2.0-bin", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf2.0-bin-dbgsym", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf2.0-common", "binary_version": "2.42.8+dfsg-1ubuntu0.4" }, { "binary_name": "libgdk-pixbuf2.0-doc", "binary_version": "2.42.8+dfsg-1ubuntu0.4" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gdk-pixbuf-tests", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "gdk-pixbuf-tests-dbgsym", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "gir1.2-gdkpixbuf-2.0", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf-2.0-0", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf-2.0-0-dbgsym", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf-2.0-dev", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf2.0-bin", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf2.0-bin-dbgsym", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf2.0-common", "binary_version": "2.42.10+dfsg-3ubuntu3.2" }, { "binary_name": "libgdk-pixbuf2.0-doc", "binary_version": "2.42.10+dfsg-3ubuntu3.2" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "gdk-pixbuf-tests", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "gdk-pixbuf-tests-dbgsym", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "gir1.2-gdkpixbuf-2.0", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf-2.0-0", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf-2.0-0-dbgsym", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf-2.0-dev", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf2.0-bin", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf2.0-bin-dbgsym", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf2.0-common", "binary_version": "2.42.12+dfsg-2ubuntu0.1" }, { "binary_name": "libgdk-pixbuf2.0-doc", "binary_version": "2.42.12+dfsg-2ubuntu0.1" } ], "availability": "No subscription required" }