Every CVE Search/ Get API key

CVE-2026-16768

Gdk-pixbuf: out-of-bounds read in ico parser

5.3 Medium

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

0.40%Up 0.2 points since Jul 24, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.3

Gdk-pixbuf: out-of-bounds read in ico parser

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
CVE-2026-16768
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-125
Updated
2026-11-05
EUVDEUVD-2026-48315 5.3

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
EUVD-2026-48315
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-05
GitHub AdvisoriesGHSA-744w-9fjj-p376 5.3

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that...

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
GHSA-744w-9fjj-p376
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-125
Updated
2026-11-02
NVD 5.3

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
CVE-2026-16768
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-125
Updated
2026-11-05
OSVBELL-CVE-2026-16768 5.3
Record
BELL-CVE-2026-16768
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2026-16768 5.3

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
DEBIAN-CVE-2026-16768
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2026-16768 5.3

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
UBUNTU-CVE-2026-16768
CVSS 3.1
5.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVAZL-93330 No score

CVE-2026-16768 affecting package gdk-pixbuf2 2.42.10-6

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Record
AZL-93330
Updated
2026-11-05
OSVMGASA-2026-0417 No score

Updated gdk-pixbuf2.0 packages fix security vulnerabilities

Heap‑buffer‑overflow in gdk‑pixbuf. (CVE-2025-7345) Out-of-bounds read in ico parser. (CVE-2026-16768) Invalid write in jpeg icc profile parser on error recovery. (CVE-2026-81893)

Record
MGASA-2026-0417
Updated
2026-11-02
OSVMGASA-2026-0503 No score

Updated mingw-gdk-pixbuf package fixes security vulnerabilities

out-of-bounds read in ico parser. (CVE-2026-16768) Invalid write in jpeg icc profile parser on error recovery. (CVE-2026-81893)

Record
MGASA-2026-0503
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
gdk-pixbuf2
Azure Linux:3
 through 2.42.10-6 None known
gdk-pixbuf
Alpaquita:23
 2.42.10-r0 and later None known
gdk-pixbuf
Alpaquita:25
 2.42.12-r2 and later None known
gdk-pixbuf
Alpaquita:stream
 2.42.12-r2 and later None known
gdk-pixbuf
Debian:12
 All versions, plus listed versions
2.42.10+dfsg-12.42.10+dfsg-1+deb12u12.42.10+dfsg-1+deb12u22.42.10+dfsg-1+deb12u32.42.10+dfsg-1+deb12u4
Show 21 moreShow less
2.42.10+dfsg-22.42.10+dfsg-32.42.12+dfsg-12.42.12+dfsg-22.42.12+dfsg-32.42.12+dfsg-42.42.12+dfsg-52.44.3+dfsg-12.44.3+dfsg-22.44.3+dfsg-32.44.4+dfsg-12.44.4+dfsg-22.44.4+dfsg-32.44.5+dfsg-12.44.5+dfsg-22.44.5+dfsg-32.44.5+dfsg-42.44.6+dfsg-12.44.6+dfsg-22.44.7+dfsg-12.44.8+dfsg-1
 None known
gdk-pixbuf
Debian:13
 All versions, plus listed versions
2.42.12+dfsg-42.42.12+dfsg-4+deb13u12.42.12+dfsg-52.44.3+dfsg-12.44.3+dfsg-2
Show 12 moreShow less
2.44.3+dfsg-32.44.4+dfsg-12.44.4+dfsg-22.44.4+dfsg-32.44.5+dfsg-12.44.5+dfsg-22.44.5+dfsg-32.44.5+dfsg-42.44.6+dfsg-12.44.6+dfsg-22.44.7+dfsg-12.44.8+dfsg-1
 None known
gdk-pixbuf
Debian:14
 All versions, plus listed versions
2.42.12+dfsg-42.42.12+dfsg-52.44.3+dfsg-12.44.3+dfsg-22.44.3+dfsg-3
Show 11 moreShow less
2.44.4+dfsg-12.44.4+dfsg-22.44.4+dfsg-32.44.5+dfsg-12.44.5+dfsg-22.44.5+dfsg-32.44.5+dfsg-42.44.6+dfsg-12.44.6+dfsg-22.44.7+dfsg-12.44.8+dfsg-1
 None known
gdk-pixbuf2.0
Mageia:10
From an advisory covering 3 CVEs
 before 2.44.4-2.1.mga10
2.44.4-2.1.mga10
gdk-pixbuf2.0
Mageia:9
From an advisory covering 3 CVEs
 before 2.42.10-2.4.mga9
2.42.10-2.4.mga9
mingw-gdk-pixbuf
Mageia:10
From an advisory covering 2 CVEs
 before 2.44.4-1.1.mga10
2.44.4-1.1.mga10
Show 7 moreShow less
Affected packages
PackageAffectedFixed
gdk-pixbuf
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.32.1-12.32.2-12.32.2-1ubuntu12.32.2-1ubuntu1.22.32.2-1ubuntu1.3
Show 6 moreShow less
2.32.2-1ubuntu1.42.32.2-1ubuntu1.52.32.2-1ubuntu1.62.32.2-1ubuntu1.6+esm12.32.2-1ubuntu1.6+esm22.32.2-1ubuntu1.6+esm3
 None known
gdk-pixbuf
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.36.11-12.36.11-1ubuntu0.12.36.11-22.36.11-2ubuntu0.1~esm12.36.11-2ubuntu0.1~esm22.36.11-2ubuntu0.1~esm3
 None known
gdk-pixbuf
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.40.0+dfsg-1build12.40.0+dfsg-1ubuntu12.40.0+dfsg-22.40.0+dfsg-32.40.0+dfsg-3ubuntu0.1
Show 6 moreShow less
2.40.0+dfsg-3ubuntu0.22.40.0+dfsg-3ubuntu0.32.40.0+dfsg-3ubuntu0.42.40.0+dfsg-3ubuntu0.52.40.0+dfsg-3ubuntu0.5+esm12.40.0+dfsg-3ubuntu0.5+esm3
 None known
gdk-pixbuf
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.42.6+dfsg-1build22.42.6+dfsg-1build32.42.6+dfsg-2ubuntu22.42.6+dfsg-2ubuntu32.42.8+dfsg-1
Show 5 moreShow less
2.42.8+dfsg-1ubuntu0.12.42.8+dfsg-1ubuntu0.22.42.8+dfsg-1ubuntu0.32.42.8+dfsg-1ubuntu0.42.42.8+dfsg-1ubuntu0.5
 None known
gdk-pixbuf
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.42.10+dfsg-1build12.42.10+dfsg-32.42.10+dfsg-3ubuntu12.42.10+dfsg-3ubuntu22.42.10+dfsg-3ubuntu32.42.10+dfsg-3ubuntu3.12.42.10+dfsg-3ubuntu3.22.42.10+dfsg-3ubuntu3.3
 None known
gdk-pixbuf
Ubuntu:26.10
 All versions, plus listed versions
2.44.5+dfsg-4ubuntu12.44.7+dfsg-12.44.8+dfsg-1
 None known
gdk-pixbuf
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.42.12+dfsg-52.44.4+dfsg-12.44.5+dfsg-32.44.5+dfsg-42.44.5+dfsg-4ubuntu1
 None known

History

History
RecordedChangedSources
affected, factsCVE List, EUVD, NVD
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-16768 is a medium vulnerability (CVSS 5.3) in Gnome Gdk-pixbuf, published July 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 35th percentile. No source names a fixed version.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open