CVE detail
CVE-2026-5201
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 19.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
28 source links · newest first
Information published.
vendormsrc.microsoft.comApr 8, 2026, 8:38 AM- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5201.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 31, 2026, 9:16 AM No excerpt available.
Vendor Advisorylists.debian.orgMar 31, 2026, 9:16 AM- https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgMar 31, 2026, 9:16 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2453291bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/security/cve/CVE-2026-5201access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:25096access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19725access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19724access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19210access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:19127access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:16174access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:16030access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:16009access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:16008access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:12115access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:12114access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:12062access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:12061access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:12060access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:11806access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:11328access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:11327access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:11326access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:11325access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:10741access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:10708access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:10707access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 31, 2026, 9:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2024-1062CVSS 5.5 · Medium
A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.
- CVE-2020-14311CVSS 5.7 · Medium
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arit…
- CVE-2020-14310CVSS 5.7 · Medium
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it be…
- CVE-2019-14815CVSS 7.8 · High
A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.
- CVE-2019-14816CVSS 7.8 · High
There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of ser…
- CVE-2019-14814CVSS 7.8 · High
There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial…