Log in Start free

Vulnerability · Published Jul 23, 2026 · Assigned by redhat

CVE-2026-16768Gdk-pixbuf: out-of-bounds read in ico parser

Medium 5.3

In plain English

A medium-severity out-of-bounds read in gdk-pixbuf from GNOME. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.4%top 65.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12gdk-pixbufno fix listedDEBIAN-CVE-2026-16768
Debian:13gdk-pixbufno fix listedDEBIAN-CVE-2026-16768
Debian:14gdk-pixbufno fix listedDEBIAN-CVE-2026-16768
Ubuntu:22.04:LTSgdk-pixbufno fix listedUBUNTU-CVE-2026-16768
Ubuntu:24.04:LTSgdk-pixbufno fix listedUBUNTU-CVE-2026-16768
Ubuntu:26.04:LTSgdk-pixbufno fix listedUBUNTU-CVE-2026-16768
Ubuntu:26.10gdk-pixbufno fix listedUBUNTU-CVE-2026-16768

Affected products (as reported)

VendorProductVersions
GNOME gdk-pixbuf see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References