CVE-2026-16768

Name of the Vulnerable Software and Affected Versions gdk-pixbuf (affected versions not specified)

Description An out-of-bounds read occurs when parsing a specially crafted ICO file. This happens because of improper bounds checking against the actual palette size when pixel values exceed the defined palette range. Consequently, heap bytes are interpreted as valid palette indices and rendered as RGB pixel values in the output image, which may allow an attacker to extract heap content through the generated output, such as a thumbnail.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.