CVE-2026-81893

Name of the Vulnerable Software and Affected Versions gdk-pixbuf versions 2.26.4 and later

Description A flaw exists when loading a specially crafted JPEG image containing chunked ICC profile markers. An error during the parsing of the ICC profile can leave stale size metadata after the profile buffer is freed. A subsequent allocation during the same decode process can lead to an out-of-bounds write, which may cause the application to crash. This issue occurs when an application using gdk-pixbuf processes the malicious image.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.