{"id":"CVE-2015-8875","aliases":["DEBIAN-CVE-2015-8875","DLA-450-1","DSA-3589-1","EUVD-2015-8731","GHSA-vvxc-jgjh-cjf4","MGASA-2016-0192","UBUNTU-CVE-2015-8875","USN-3085-1"],"status":"published","title":"Multiple integer overflows in the (1) pixops_composite_nearest, (2)...","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02773,"percentile":0.86429,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2016-04-30T00:00:00Z","modified":"2026-09-09T07:02:04Z","fixes":[{"ecosystem":"Debian:12","package":"gdk-pixbuf","fixed_in":["2.34.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gdk-pixbuf","fixed_in":["2.34.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gdk-pixbuf","fixed_in":["2.34.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"gdk-pixbuf2.0","fixed_in":["2.32.1-1.1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"gdk-pixbuf","fixed_in":["2.30.7-0ubuntu1.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.1-1+deb7u4"}]}],"versions":["2.26.1-1","2.26.1-1+deb7u1","2.26.1-1+deb7u2","2.26.1-1+deb7u3"],"bundled":2},{"source":"osv","ecosystem":"Debian:8","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-2+deb8u5"}]}],"versions":["2.31.1-2","2.31.1-2+deb8u1","2.31.1-2+deb8u2","2.31.1-2+deb8u3","2.31.1-2+deb8u4","2.31.1-2+deb8u4+kbsd8u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"gdk-pixbuf2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.1-1.1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30.7-0ubuntu1.6"}]}],"versions":["2.28.1-1ubuntu2","2.30.0-0ubuntu2","2.30.1-0ubuntu2","2.30.2-0ubuntu1","2.30.2-0ubuntu2","2.30.3-0ubuntu1","2.30.4-0ubuntu1","2.30.5-0ubuntu1","2.30.6-1","2.30.7-0ubuntu1","2.30.7-0ubuntu1.1","2.30.7-0ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30.7-0ubuntu1.6"}]}],"versions":["2.28.1-1ubuntu2","2.30.0-0ubuntu2","2.30.1-0ubuntu2","2.30.2-0ubuntu1","2.30.2-0ubuntu2","2.30.3-0ubuntu1","2.30.4-0ubuntu1","2.30.5-0ubuntu1","2.30.6-1","2.30.7-0ubuntu1","2.30.7-0ubuntu1.1","2.30.7-0ubuntu1.2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.2-1ubuntu1.2"}]}],"versions":["2.32.1-1","2.32.2-1","2.32.2-1ubuntu1"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnome","product":"gdk-pixbuf"}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3589","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/16/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-3085-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/12/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"https://git.gnome.org/browse/gdk-pixbuf/commit/?id=dbfe8f70471864818bf458a39c8a99640895bd22","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2016/05/17/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8875"},{"url":"https://github.com/advisories/GHSA-vvxc-jgjh-cjf4"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8875","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0192.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18476","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2016/05/17/7","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-8875","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3085-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8875","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-7552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-6352","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-8875","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2016-06-01T22:00:00Z","modified":"2024-08-06T08:29:22.089Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-8731","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2016-06-01T22:00:00Z","modified":"2024-08-06T08:29:22Z","updated_at":"2026-11-03T01:57:25.869767Z"}],"ghsa":[{"id":"GHSA-vvxc-jgjh-cjf4","title":"Multiple integer overflows in the (1) pixops_composite_nearest, (2)...","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2022-05-17T03:47:57Z","modified":"2023-01-27T05:09:14Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:43:21.634382Z"}],"nvd":[{"id":"CVE-2015-8875","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2016-06-01T22:59:00.127Z","modified":"2026-06-17T00:35:25.21Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"CVE-2015-8875","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2016-06-01T22:59:00Z","modified":"2026-04-16T06:26:09.623842036Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8875","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2016-06-01T22:59:00.127Z","modified":"2026-09-09T07:02:04.42381901Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-8875","description":"Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image, which triggers a heap-based buffer overflow.","status":"published","published":"2016-06-01T00:00:00Z","modified":"2026-04-22T10:24:30.044358Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"DLA-450-1","title":"gdk-pixbuf - security update","status":"published","published":"2016-04-30T00:00:00Z","modified":"2026-03-09T02:09:46.159441Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3589-1","title":"gdk-pixbuf - security update","status":"published","published":"2016-05-30T00:00:00Z","modified":"2026-03-09T01:18:46.693557Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2016-0192","title":"Updated gdk-pixbuf2.0 packages fix security vulnerability","description":"The gdk-pixbuf2.0 library is vulnerable to overflows in the\npixops_composite_nearest(), pixops_composite_color_nearest() and\npixops_process() functions in pixops/pixops.c (CVE-2015-8875).\n","status":"published","published":"2016-05-20T11:38:30Z","modified":"2026-04-16T06:25:08.770235855Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"USN-3085-1","title":"gdk-pixbuf vulnerabilities","description":"It was discovered that the GDK-PixBuf library did not properly handle specially\ncrafted bmp images, leading to a heap-based buffer overflow. If a user or\nautomated system were tricked into opening a specially crafted bmp file, a\nremote attacker could use this flaw to cause GDK-PixBuf to crash, resulting\nin a denial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-7552)\n\nIt was discovered that the GDK-PixBuf library contained an integer overflow\nwhen handling certain images. If a user or automated system were tricked into\nopening a crafted image file, a remote attacker could use this flaw to cause\nGDK-PixBuf to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8875)\n\nFranco Costantini discovered that the GDK-PixBuf library contained an \nout-of-bounds write error when parsing an ico file. If a user or automated\nsystem were tricked into opening a crafted ico file, a remote attacker could\nuse this flaw to cause GDK-PixBuf to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-6352)\n","status":"published","published":"2016-09-21T21:29:42Z","modified":"2026-04-22T09:28:36.102896Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}