Every CVE Search/ Get API key

CVE-2022-48622

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder...

7.8 HighFix available

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.41%Up 0.4 points since Jan 31, 2024
90%50%10%1%

What each source reports

NVD Score used 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2022-51317 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
EUVD-2022-51317
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-2pj9-xmx5-6fv3 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder...

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
GHSA-2pj9-xmx5-6fv3
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2022-48622 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
ALPINE-CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-34069 7.8

CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.40.0-6

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
AZL-34069
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 26 moreShow less
OSVAZL-34726 7.8

CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
AZL-34726
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVBELL-CVE-2022-48622 7.8
Record
BELL-CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-48622 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
DEBIAN-CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2024-2039 7.8

gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.

Security Fix(es):

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.(CVE-2022-48622)

Record
OESA-2024-2039
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2040 7.8

gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.

Security Fix(es):

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.(CVE-2022-48622)

Record
OESA-2024-2040
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2143 7.8

gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.

Security Fix(es):

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.(CVE-2022-48622)

Record
OESA-2024-2143
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2144 7.8

gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.

Security Fix(es):

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.(CVE-2022-48622)

Record
OESA-2024-2144
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-2145 7.8

gdk-pixbuf2 security update

gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.

Security Fix(es):

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.(CVE-2022-48622)

Record
OESA-2024-2145
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3341 7.3

Red Hat Security Advisory: gdk-pixbuf2 security update

Record
RHSA-2024:3341
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3834 7.3

Red Hat Security Advisory: gdk-pixbuf2 security update

Record
RHSA-2024:3834
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2024:3834 7.3

Moderate: gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

  • gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3834
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-48622 7.8

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
UBUNTU-CVE-2022-48622
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:3341 No score

Moderate: gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

  • gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3341
Updated
2026-11-02
OSVALSA-2024:3834 No score

Moderate: gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

  • gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2024:3834
Updated
2026-11-02
OSVCLSA-2025-1758824659 No score

gdk-pixbuf2: Fix of CVE-2022-48622

  • CVE-2022-48622: fix heap memory corruption issue in ANI decoder to prevent denial of service or code execution attack
Record
CLSA-2025-1758824659
Updated
2026-11-02
OSVMGASA-2024-0182 No score

Updated gdk-pixbuf2.0 packages fix security vulnerability

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

Record
MGASA-2024-0182
Updated
2026-11-02
OSVopenSUSE-SU-2024:13967-1 No score

gdk-pixbuf-devel-2.42.12-1.1 on GA media

These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13967-1
Updated
2026-11-02
OSVRLSA-2024:3341 No score

Moderate: gdk-pixbuf2 security update

The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter.

Security Fix(es):

  • gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2024:3341
Updated
2026-11-02
OSVSUSE-SU-2024:1699-1 No score

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

  • CVE-2022-48622: Fixed files rejection with multiple anih chunks (bsc#1219276).
Record
SUSE-SU-2024:1699-1
Updated
2026-11-02
OSVSUSE-SU-2024:1842-1 No score

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

  • CVE-2022-48622: Fixed files rejection with multiple anih chunks (bsc#1219276).
Record
SUSE-SU-2024:1842-1
Updated
2026-11-02
OSVSUSE-SU-2024:2076-1 No score

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

gdk-pixbuf was updated to version 2.42.12:

  • Security issues fixed:

    • CVE-2022-48622: Fixed vulnerability where a crafted .ani file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack to a denial of service or code execution attack (bsc#1219276)

  • Changes in version 2.42.12:

    • ani: Reject files with multiple INA or IART chunks,
    • ani: validate chunk size,
    • Updated translations.

  • Enable other image loaders such as xpm and xbm (bsc#1223903)

  • Changes in version 2.42.11:

    • Disable fringe loaders by default.
    • Introspection fixes.
    • Updated translations.

  • Changes in version 2.42.10:

    • Search for rst2man.py.
    • Update the memory size limit for JPEG images.
    • Updated translations.

  • Fixed loading of larger images

  • Avoid Bash specific syntax in baselibs postscript (bsc#1195391)

Record
SUSE-SU-2024:2076-1
Updated
2026-11-02
OSVSUSE-SU-2024:2077-1 No score

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

gdk-pixbuf was updated to version 2.42.12:

  • Security issues fixed:

    • CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276)

  • Changes in version 2.42.12:

    • ani: Reject files with multiple INA or IART chunks,
    • ani: validate chunk size,
    • Updated translations.

  • Enable other image loaders such as xpm and xbm (bsc#1223903)

  • Changes in version 2.42.11:

    • Disable fringe loaders by default.
    • Introspection fixes.
    • Updated translations.

  • Changes in version 2.42.10:

    • Search for rst2man.py.
    • Update the memory size limit for JPEG images.
    • Updated translations.

  • Fixed loading of larger images

  • Avoid Bash specific syntax in baselibs postscript (bsc#1195391)

Record
SUSE-SU-2024:2077-1
Updated
2026-11-02
OSVSUSE-SU-2024:2077-2 No score

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

gdk-pixbuf was updated to version 2.42.12:

  • Security issues fixed:

    • CVE-2022-48622: Fixed heap memory corruption on gdk-pixbuf (bsc#1219276)

  • Changes in version 2.42.12:

    • ani: Reject files with multiple INA or IART chunks,
    • ani: validate chunk size,
    • Updated translations.

  • Enable other image loaders such as xpm and xbm (bsc#1223903)

  • Changes in version 2.42.11:

    • Disable fringe loaders by default.
    • Introspection fixes.
    • Updated translations.

  • Changes in version 2.42.10:

    • Search for rst2man.py.
    • Update the memory size limit for JPEG images.
    • Updated translations.

  • Fixed loading of larger images

  • Avoid Bash specific syntax in baselibs postscript (bsc#1195391)

Record
SUSE-SU-2024:2077-2
Updated
2026-11-02
OSVSUSE-SU-2025:20217-1 No score

Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues:

Update to version 2.42.12:

  • Fix a build failure,
  • Fix occasional build failures,
  • ani: Reject files with multiple INA or IART chunks,
  • ani: Reject files with multiple anih chunks (CVE-2022-48622 bsc#1219276),
  • ani: validate chunk size,
  • Updated translations.
  • Enable other image loaders (most notably needed seems xpm,xbm). (boo#1223903, glgo#GNOME/gdk-pixbuf!169).

Update to version 2.42.11:

  • Disable fringe loaders by default.
  • Introspection fixes.
  • Updated translations.
Record
SUSE-SU-2025:20217-1
Updated
2026-11-02
OSVUSN-6806-1 No score

gdk-pixbuf vulnerability

Pedro Ribeiro and Vitor Pedreira discovered that the GDK-PixBuf library did not properly handle certain ANI files. An attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or to possibly execute arbitrary code.

Record
USN-6806-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gdk-pixbuf
Alpine:v3.17
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.18
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.19
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.20
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.21
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.22
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.23
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpine:v3.24
 before 2.42.12-r0
2.42.12-r0
gdk-pixbuf2
AlmaLinux:8
 before 2.36.12-6.el8_10
2.36.12-6.el8_10
gdk-pixbuf2-devel
AlmaLinux:8
 before 2.36.12-6.el8_10
2.36.12-6.el8_10
Show 89 moreShow less
Affected packages
PackageAffectedFixed
gdk-pixbuf2-modules
AlmaLinux:8
 before 2.36.12-6.el8_10
2.36.12-6.el8_10
gdk-pixbuf2-xlib
AlmaLinux:8
 before 2.36.12-6.el8_10
2.36.12-6.el8_10
gdk-pixbuf2-xlib-devel
AlmaLinux:8
 before 2.36.12-6.el8_10
2.36.12-6.el8_10
gdk-pixbuf2
AlmaLinux:9
 before 2.42.6-4.el9_4
2.42.6-4.el9_4
gdk-pixbuf2-devel
AlmaLinux:9
 before 2.42.6-4.el9_4
2.42.6-4.el9_4
gdk-pixbuf2-modules
AlmaLinux:9
 before 2.42.6-4.el9_4
2.42.6-4.el9_4
gdk-pixbuf2
Azure Linux:2
 before 2.40.0-6
2.40.0-6
gdk-pixbuf2
Azure Linux:3
 before 2.42.10-2
2.42.10-2
gdk-pixbuf
Alpaquita:23
 2.42.10-r0 up to 2.42.12-r0
2.42.12-r0
gdk-pixbuf
Alpaquita:stream
 2.42.10-r0 up to 2.42.12-r1
2.42.12-r1
gdk-pixbuf2
TuxCare:AlmaLinux:9.2
 before 2.42.6-3.el9.tuxcare.els2
2.42.6-3.el9.tuxcare.els2
gdk-pixbuf2-devel
TuxCare:AlmaLinux:9.2
 before 2.42.6-3.el9.tuxcare.els2
2.42.6-3.el9.tuxcare.els2
gdk-pixbuf2-modules
TuxCare:AlmaLinux:9.2
 before 2.42.6-3.el9.tuxcare.els2
2.42.6-3.el9.tuxcare.els2
gdk-pixbuf2-tests
TuxCare:AlmaLinux:9.2
 before 2.42.6-3.el9.tuxcare.els2
2.42.6-3.el9.tuxcare.els2
gdk-pixbuf
Debian:12
 before 2.42.10+dfsg-1+deb12u1, plus listed versions
2.42.10+dfsg-1
2.42.10+dfsg-1+deb12u1
gdk-pixbuf
Debian:13
 before 2.42.12+dfsg-1
2.42.12+dfsg-1
gdk-pixbuf
Debian:14
 before 2.42.12+dfsg-1
2.42.12+dfsg-1
gdk-pixbuf2.0
Mageia:9
 before 2.42.10-2.1.mga9
2.42.10-2.1.mga9
gdk-pixbuf2
openEuler:22.03-LTS-SP1
 before 2.42.6-7.oe2203sp1
2.42.6-7.oe2203sp1
gdk-pixbuf2
openEuler:24.03-LTS
 before 2.42.10-3.oe2403
2.42.10-3.oe2403
gdk-pixbuf2
openEuler:22.03-LTS-SP4
 before 2.42.6-7.oe2203sp4
2.42.6-7.oe2203sp4
gdk-pixbuf2
openEuler:22.03-LTS-SP3
 before 2.42.6-7.oe2203sp3
2.42.6-7.oe2203sp3
gdk-pixbuf2
openEuler:20.03-LTS-SP4
 before 2.40.0-6.oe2003sp4
2.40.0-6.oe2003sp4
gdk-pixbuf2-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-devel
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-modules
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-modules-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-xlib-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-modules-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-tests-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-xlib-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-devel-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-modules-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-tests-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-xlib
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-xlib-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2-xlib-devel
Red Hat:enterprise_linux:8::crb
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-devel
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-modules
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-modules-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2-tests-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf2
Rocky Linux:8
 before 0:2.36.12-6.el8_10
0:2.36.12-6.el8_10
gdk-pixbuf2
Rocky Linux:9
 before 0:2.42.6-4.el9_4
0:2.42.6-4.el9_4
gdk-pixbuf
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 2.34.0-19.20.1
2.34.0-19.20.1
gdk-pixbuf
SUSE:Linux Enterprise Server 12 SP5
 before 2.34.0-19.20.1
2.34.0-19.20.1
gdk-pixbuf
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 2.34.0-19.20.1
2.34.0-19.20.1
gdk-pixbuf
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise Micro 5.2
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Enterprise Storage 7.1
 before 2.40.0-150200.3.12.1
2.40.0-150200.3.12.1
gdk-pixbuf
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 2.42.12-150600.3.3.1
2.42.12-150600.3.3.1
gdk-pixbuf
openSUSE:Leap 15.6
 before 2.42.12-150600.3.3.1
2.42.12-150600.3.3.1
gdk-pixbuf
SUSE:Linux Enterprise Micro 5.3
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise Micro 5.4
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise Micro 5.5
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Manager Proxy 4.3
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Manager Server 4.3
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
openSUSE:Leap Micro 5.3
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
openSUSE:Leap Micro 5.4
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
openSUSE:Leap 15.5
 before 2.42.12-150400.5.9.1
2.42.12-150400.5.9.1
gdk-pixbuf
SUSE:Linux Micro 6.0
 before 2.42.12-1.1
2.42.12-1.1
gdk-pixbuf
Ubuntu:Pro:16.04:LTS
 before 2.32.2-1ubuntu1.6+esm1, plus listed versions
2.32.1-12.32.2-12.32.2-1ubuntu12.32.2-1ubuntu1.22.32.2-1ubuntu1.32.32.2-1ubuntu1.42.32.2-1ubuntu1.52.32.2-1ubuntu1.6
2.32.2-1ubuntu1.6+esm1
gdk-pixbuf
Ubuntu:Pro:18.04:LTS
 before 2.36.11-2ubuntu0.1~esm1, plus listed versions
2.36.11-12.36.11-1ubuntu0.12.36.11-2
2.36.11-2ubuntu0.1~esm1
gdk-pixbuf
Ubuntu:20.04:LTS
 before 2.40.0+dfsg-3ubuntu0.5, plus listed versions
2.40.0+dfsg-1build12.40.0+dfsg-1ubuntu12.40.0+dfsg-22.40.0+dfsg-32.40.0+dfsg-3ubuntu0.12.40.0+dfsg-3ubuntu0.22.40.0+dfsg-3ubuntu0.32.40.0+dfsg-3ubuntu0.4
2.40.0+dfsg-3ubuntu0.5
gdk-pixbuf
Ubuntu:22.04:LTS
 before 2.42.8+dfsg-1ubuntu0.3, plus listed versions
2.42.6+dfsg-1build22.42.6+dfsg-1build32.42.6+dfsg-2ubuntu22.42.6+dfsg-2ubuntu32.42.8+dfsg-12.42.8+dfsg-1ubuntu0.12.42.8+dfsg-1ubuntu0.2
2.42.8+dfsg-1ubuntu0.3
gdk-pixbuf
Ubuntu:24.04:LTS
 before 2.42.10+dfsg-3ubuntu3.1, plus listed versions
2.42.10+dfsg-1build12.42.10+dfsg-32.42.10+dfsg-3ubuntu12.42.10+dfsg-3ubuntu22.42.10+dfsg-3ubuntu3
2.42.10+dfsg-3ubuntu3.1
gdk-pixbuf
openSUSE:Tumbleweed
 before 2.42.12-1.1
2.42.12-1.1

History

History
RecordedChangedSources
factsOSV
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-48622 is a high vulnerability (CVSS 7.8) in Gnome Gdkpixbuf, published January 26, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 36th percentile. Fixed in gdk-pixbuf 2.42.12-r0.

References

Show 35 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open