CVE-2026-91786

Name of the Vulnerable Software and Affected Versions GNOME Shell (affected versions not specified)

Description An issue exists when processing icons from a remote search provider via D-Bus. The system does not validate the declared dimensions of the icon against the actual data buffer size. A compromised or malicious remote search provider can trigger an out-of-bounds read—a condition where the system reads data outside the intended boundary of a buffer—by providing oversized icon dimensions. This can result in the GNOME Shell process crashing or the disclosure of sensitive information from adjacent memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.