{"id":"CVE-2019-20326","aliases":["DEBIAN-CVE-2019-20326","DLA-2066-1","DLA-2749-1","EUVD-2019-10880","MGASA-2020-0056","MGASA-2021-0090","UBUNTU-CVE-2019-20326","USN-5680-1","USN-5681-1"],"status":"published","title":"gthumb - security update","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02189,"percentile":0.82562,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-787"],"published":"2020-01-13T00:00:00Z","modified":"2026-10-24T14:06:25Z","exploits":[{"source":"pocgithub","id":"Fysac/CVE-2019-20326","title":"Fysac/CVE-2019-20326","date":"2020-01-03","url":"https://github.com/Fysac/CVE-2019-20326"}],"fixes":[{"ecosystem":"Debian:12","package":"gthumb","fixed_in":["3:3.8.3-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gthumb","fixed_in":["3:3.8.3-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gthumb","fixed_in":["3:3.8.3-0.1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"gthumb","fixed_in":["3:3.3.1-2.1+deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"gthumb","fixed_in":["3:3.4.4.1-5+deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"gthumb","fixed_in":["3.7.2-2.1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"pix","fixed_in":["2.4.11-1.mga7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gthumb","fixed_in":["3:3.4.3-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gthumb","fixed_in":["3:3.6.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"gthumb","fixed_in":["3:3.8.0-2.1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.8.3-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.8.3-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.8.3-0.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.3.1-2.1+deb8u2"}]}],"versions":["3:3.3.1-2","3:3.3.1-2.1+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.4.4.1-5+deb9u2"}]}],"versions":["3:3.4.4.1-5","3:3.4.4.1-5+deb9u1"]},{"source":"osv","ecosystem":"Mageia:7","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.2-2.1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"pix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.11-1.mga7"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.4.3-1ubuntu0.1~esm1"}]}],"versions":["3:3.3.1.is.3.2.8-0ubuntu3","3:3.4.1-2","3:3.4.1-3","3:3.4.1-4","3:3.4.3-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.6.1-1ubuntu0.1~esm1"}]}],"versions":["3:3.5.2-2ubuntu1","3:3.5.3-1","3:3.5.4-1","3:3.6.0-1","3:3.6.0-2","3:3.6.0-3","3:3.6.0-4","3:3.6.1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.8.0-2.1ubuntu0.1"}]}],"versions":["3:3.8.0-2","3:3.8.0-2.1","3:3.8.0-2.1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.8.0-2.1ubuntu0.1"}]}],"versions":["3:3.8.0-2","3:3.8.0-2.1","3:3.8.0-2.1build1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.4.3-1ubuntu0.1~esm1"}]}],"versions":["3:3.3.1.is.3.2.8-0ubuntu3","3:3.4.1-2","3:3.4.1-3","3:3.4.1-4","3:3.4.3-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gthumb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:3.6.1-1ubuntu0.1~esm1"}]}],"versions":["3:3.5.2-2ubuntu1","3:3.5.3-1","3:3.5.4-1","3:3.6.0-1","3:3.6.0-2","3:3.6.0-3","3:3.6.0-4","3:3.6.1-1"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnome","product":"gthumb"},{"vendor":"linuxmint","product":"pix"}],"references":[{"url":"https://gitlab.gnome.org/GNOME/gthumb/commit/4faa5ce2358812d23a1147953ee76f59631590ad","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://gitlab.gnome.org/GNOME/gthumb/commit/ca8f528209ab78935c30e42fe53bdf1a24f3cb44","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gthumb/commits/master/extensions/cairo_io/cairo-image-surface-jpeg.c","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://github.com/Fysac/CVE-2019-20326","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://security.gentoo.org/glsa/202008-05","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/08/msg00027.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-20326","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0056.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26084","tags":["report"]},{"url":"https://www.debian.org/lts/security/2020/dla-2066","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0090.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-20326","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gthumb/commit/14860321ce3235d420498c4f81f21003d1fb78f4","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5680-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5681-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-20326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36427","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18718","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-20326","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","status":"published","published":"2020-03-16T21:33:36Z","modified":"2024-08-05T02:39:09.903Z","updated_at":"2026-11-02T14:20:17.11067Z"}],"euvd":[{"id":"EUVD-2019-10880","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","status":"published","published":"2020-03-16T21:33:36Z","modified":"2024-08-05T02:39:09Z","updated_at":"2026-11-03T02:40:22.702411Z"}],"nvd":[{"id":"CVE-2019-20326","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","status":"published","published":"2020-03-16T22:15:14.59Z","modified":"2026-06-17T02:30:15.757Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:45.254119Z"}],"osv":[{"id":"CVE-2019-20326","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","status":"published","published":"2020-03-16T22:15:14.59Z","modified":"2026-10-24T14:06:25.760442725Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:12.010761Z"},{"id":"DEBIAN-CVE-2019-20326","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","status":"published","published":"2020-03-16T22:15:14.59Z","modified":"2026-09-21T07:03:17.724286306Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"UBUNTU-CVE-2019-20326","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.","status":"published","published":"2020-03-16T22:15:00Z","modified":"2026-04-22T12:17:23.074983Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"DLA-2066-1","title":"gthumb - security update","status":"published","published":"2020-01-13T00:00:00Z","modified":"2026-03-09T01:22:37.661225Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2749-1","title":"gthumb - security update","status":"published","published":"2021-08-29T00:00:00Z","modified":"2026-03-09T01:20:43.431518Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2020-0056","title":"Updated gthumb packages fix security vulnerability","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg()\nin extensions/cairo_io/cairo-image-surface-jpeg.c in gThumb and Pix\nallows attackers to cause a crash and potentially execute arbitrary code\nvia a crafted JPEG file (CVE-2019-20326).\n","status":"published","published":"2020-01-28T07:52:40Z","modified":"2026-04-16T04:41:09.177064278Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"MGASA-2021-0090","title":"Updated pix packages fix a security vulnerability","description":"A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in\nextensions/cairo_io/cairo-image-surface-jpeg.c in Linux Mint Pix before 2.4.5\nallows attackers to cause a crash and potentially execute arbitrary code via a\ncrafted JPEG file (CVE-2019-20326).\n","status":"published","published":"2021-02-28T23:16:12Z","modified":"2026-04-16T04:40:47.944888483Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"USN-5680-1","title":"gThumb vulnerabilities","description":"It was discovered that gThumb did not properly managed\nmemory when processing certain image files. If a user were\ntricked into opening a specially crafted JPEG file, an\nattacker could possibly use this issue to cause gThumb to\ncrash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2019-20326)\n\nIt was discovered that gThumb did not properly handled\ncertain malformed image files. If a user were tricked into\nopening a specially crafted JPEG file, an attacker could\npossibly use this issue to cause gThumb to crash, resulting\nin a denial of service. (CVE-2020-36427)\n","status":"published","published":"2022-10-14T08:42:05Z","modified":"2026-04-22T10:28:58.028062Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5681-1","title":"gThumb vulnerabilities","description":"It was discovered that gThumb did not properly managed\nmemory under certain circumstances. An attacker could\npossibly use this issue to cause gThumb to crash, resulting\nin a denial of service, or possibly execute arbitrary code.\n(CVE-2018-18718)\n\nIt was discovered that gThumb did not properly managed\nmemory when processing certain image files. If a user were\ntricked into opening a specially crafted JPEG file, an\nattacker could possibly use this issue to cause gThumb to\ncrash, resulting in a denial of service, or possibly\nexecute arbitrary code. (CVE-2019-20326)\n\nIt was discovered that gThumb did not properly handled\ncertain malformed image files. If a user were tricked into\nopening a specially crafted JPEG file, an attacker could\npossibly use this issue to cause gThumb to crash, resulting\nin a denial of service. (CVE-2020-36427)\n","status":"published","published":"2022-10-14T14:13:08Z","modified":"2026-06-25T13:31:27.047926032Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}