CVE-2015-7674
Integer overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted GIF image file, which triggers a heap-based buffer overflow.
- EPSS
- 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- gnome:gdk-pixbuf
- opensuse:opensuse
References
- http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.1.news
- http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html
- http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html
- http://www.debian.org/security/2015/dsa-3378
- http://www.openwall.com/lists/oss-security/2015/10/01/4