CVE-2016-6855

7.5 highEPSS 18%

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 18% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2016-09-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
fedoraproject:fedora
gnome:eye_of_gnome
opensuse:leap
opensuse:opensuse

References

http://lists.opensuse.org/opensuse-updates/2016-09/msg00021.html
http://packetstormsecurity.com/files/138486/Gnome-Eye-Of-Gnome-3.10.2-Out-Of-Bounds-Write.html
http://www.securityfocus.com/bid/92616
http://www.ubuntu.com/usn/USN-3069-1
https://bugzilla.gnome.org/show_bug.cgi?id=770143

Check your stack JSON