{"id":"CVE-2025-6199","aliases":["AZL-64077","AZL-64079","DEBIAN-CVE-2025-6199","DLA-4225-1","DSA-5946-1","EUVD-2025-18505","GHSA-h3qh-mvr3-r7x7","MGASA-2025-0198","OESA-2025-1866","SUSE-SU-2025:02954-1","SUSE-SU-2025:02963-1","SUSE-SU-2025:03373-1","SUSE-SU-2025:20694-1","SUSE-SU-2025:20748-1","SUSE-SU-2026:20128-1","SUSE-SU-2026:20156-1","UBUNTU-CVE-2025-6199","USN-7662-1","openSUSE-SU-2025:15397-1","openSUSE-SU-2026:20084-1"],"status":"published","title":"Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00206,"percentile":0.10818,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2025-06-17T14:30:42Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"gdk-pixbuf2","fixed_in":["2.40.0-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gdk-pixbuf2","fixed_in":["2.42.10-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"gdk-pixbuf","fixed_in":["2.42.10+dfsg-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gdk-pixbuf","fixed_in":["2.42.12+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gdk-pixbuf","fixed_in":["2.42.12+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"gdk-pixbuf","fixed_in":["2.42.2+dfsg-1+deb11u3"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"gdk-pixbuf2.0","fixed_in":["2.42.10-2.2.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"gdk-pixbuf2","fixed_in":["2.40.0-7.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"gdk-pixbuf2","fixed_in":["2.42.6-8.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"gdk-pixbuf2","fixed_in":["2.42.6-8.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"gdk-pixbuf2","fixed_in":["2.42.10-5.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"gdk-pixbuf2","fixed_in":["2.42.10-5.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"gdk-pixbuf2","fixed_in":["2.42.10-5.oe2403sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdk-pixbuf","fixed_in":["2.32.2-1ubuntu1.6+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdk-pixbuf","fixed_in":["2.36.11-2ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gdk-pixbuf","fixed_in":["2.40.0+dfsg-3ubuntu0.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gdk-pixbuf","fixed_in":["2.42.8+dfsg-1ubuntu0.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gdk-pixbuf","fixed_in":["2.42.10+dfsg-3ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gdk-pixbuf","fixed_in":["2.42.12+dfsg-4build1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"gdk-pixbuf","fixed_in":["2.42.12-4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10+dfsg-1+deb12u2"}]}],"versions":["2.42.10+dfsg-1","2.42.10+dfsg-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.2+dfsg-1+deb11u3"}]}],"versions":["2.42.2+dfsg-1","2.42.2+dfsg-1+deb11u1","2.42.2+dfsg-1+deb11u2"]},{"source":"osv","ecosystem":"Debian:12","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10+dfsg-1+deb12u2"}]}],"versions":["2.42.10+dfsg-1","2.42.10+dfsg-1+deb12u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"gdk-pixbuf2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10-2.2.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-7.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.6-8.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.6-8.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10-5.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10-5.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"gdk-pixbuf2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10-5.oe2403sp2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150600.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150600.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150600.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-150400.5.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0-150200.3.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-160000.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.2-1ubuntu1.6+esm2"}]}],"versions":["2.32.1-1","2.32.2-1","2.32.2-1ubuntu1","2.32.2-1ubuntu1.2","2.32.2-1ubuntu1.3","2.32.2-1ubuntu1.4","2.32.2-1ubuntu1.5","2.32.2-1ubuntu1.6","2.32.2-1ubuntu1.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.11-2ubuntu0.1~esm2"}]}],"versions":["2.36.11-1","2.36.11-1ubuntu0.1","2.36.11-2","2.36.11-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0+dfsg-3ubuntu0.5+esm1"}]}],"versions":["2.40.0+dfsg-1build1","2.40.0+dfsg-1ubuntu1","2.40.0+dfsg-2","2.40.0+dfsg-3","2.40.0+dfsg-3ubuntu0.1","2.40.0+dfsg-3ubuntu0.2","2.40.0+dfsg-3ubuntu0.3","2.40.0+dfsg-3ubuntu0.4","2.40.0+dfsg-3ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8+dfsg-1ubuntu0.4"}]}],"versions":["2.42.6+dfsg-1build2","2.42.6+dfsg-1build3","2.42.6+dfsg-2ubuntu2","2.42.6+dfsg-2ubuntu3","2.42.8+dfsg-1","2.42.8+dfsg-1ubuntu0.1","2.42.8+dfsg-1ubuntu0.2","2.42.8+dfsg-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10+dfsg-3ubuntu3.2"}]}],"versions":["2.42.10+dfsg-1build1","2.42.10+dfsg-3","2.42.10+dfsg-3ubuntu1","2.42.10+dfsg-3ubuntu2","2.42.10+dfsg-3ubuntu3","2.42.10+dfsg-3ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12+dfsg-4build1"}]}],"versions":["2.42.12+dfsg-2","2.42.12+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.2-1ubuntu1.6+esm2"}]}],"versions":["2.32.1-1","2.32.2-1","2.32.2-1ubuntu1","2.32.2-1ubuntu1.2","2.32.2-1ubuntu1.3","2.32.2-1ubuntu1.4","2.32.2-1ubuntu1.5","2.32.2-1ubuntu1.6","2.32.2-1ubuntu1.6+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.11-2ubuntu0.1~esm2"}]}],"versions":["2.36.11-1","2.36.11-1ubuntu0.1","2.36.11-2","2.36.11-2ubuntu0.1~esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.0+dfsg-3ubuntu0.5+esm1"}]}],"versions":["2.40.0+dfsg-1build1","2.40.0+dfsg-1ubuntu1","2.40.0+dfsg-2","2.40.0+dfsg-3","2.40.0+dfsg-3ubuntu0.1","2.40.0+dfsg-3ubuntu0.2","2.40.0+dfsg-3ubuntu0.3","2.40.0+dfsg-3ubuntu0.4","2.40.0+dfsg-3ubuntu0.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.8+dfsg-1ubuntu0.4"}]}],"versions":["2.42.6+dfsg-1build2","2.42.6+dfsg-1build3","2.42.6+dfsg-2ubuntu2","2.42.6+dfsg-2ubuntu3","2.42.8+dfsg-1","2.42.8+dfsg-1ubuntu0.1","2.42.8+dfsg-1ubuntu0.2","2.42.8+dfsg-1ubuntu0.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.10+dfsg-3ubuntu3.2"}]}],"versions":["2.42.10+dfsg-1build1","2.42.10+dfsg-3","2.42.10+dfsg-3ubuntu1","2.42.10+dfsg-3ubuntu2","2.42.10+dfsg-3ubuntu3","2.42.10+dfsg-3ubuntu3.1"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gdk-pixbuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.42.12-160000.3.1"}]}],"bundled":2}],"products":[{"vendor":"gnome","product":"gdkpixbuf"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-6199","tags":["vdb-entry","x_refsource_REDHAT","Third Party Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2373147","tags":["issue-tracking","x_refsource_REDHAT","Issue Tracking","Third Party Advisory","report"]},{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/257","tags":["report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00023.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6199","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-h3qh-mvr3-r7x7"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6199.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-6199","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0198.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34388","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00110.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1866","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502954-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245227","tags":["report"]},{"url":"https://bugzilla.suse.com/1246114","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-6199","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-7345","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502963-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503373-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1159337","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520694-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520748-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620128-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620156-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-6199","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-6199","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/merge_requests/191","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7662-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-7345","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-6199","title":"Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T14:30:42.665Z","modified":"2026-11-06T17:52:49.21Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-06T18:59:07.714367Z"}],"euvd":[{"id":"EUVD-2025-18505","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T14:30:42Z","modified":"2026-11-06T17:52:49Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-06T19:05:52.672747Z"}],"ghsa":[{"id":"GHSA-h3qh-mvr3-r7x7","title":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is...","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T15:31:12Z","modified":"2026-06-26T03:32:26Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:09:00.559973Z"}],"nvd":[{"id":"CVE-2025-6199","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T15:15:54.307Z","modified":"2026-11-06T18:17:26.5Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-06T20:01:10.091781Z"}],"osv":[{"id":"CVE-2025-6199","title":"Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T14:30:42.665Z","modified":"2026-11-08T02:30:32.505333661Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-07T03:07:58.118356Z"},{"id":"DEBIAN-CVE-2025-6199","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T15:15:54.307Z","modified":"2026-11-07T09:47:24.634853576Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2025-1866","title":"gdk-pixbuf2 security update","description":"gdk is written in C but has been designed from the ground up to support a wide range of languages. It provide a complete set of widgets,and suitable for projects ranging from small one-off tools to complete application suites.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.(CVE-2025-6199)","status":"published","published":"2025-07-18T11:08:57Z","modified":"2026-08-18T01:18:54.582023491Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2025-6199","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T15:15:00Z","modified":"2026-04-22T16:07:26.850887Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-64077","title":"CVE-2025-6199 affecting package gdk-pixbuf2 for versions less than 2.40.0-8","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T15:15:54Z","modified":"2026-04-21T04:32:17.376592Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"AZL-64079","title":"CVE-2025-6199 affecting package gdk-pixbuf2 for versions less than 2.42.10-4","description":"A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompression, the decoder sets the reported output size to the full buffer length rather than the actual number of written bytes. This logic error results in uninitialized sections of the buffer being included in the output, potentially leaking arbitrary memory contents in the processed image.","status":"published","published":"2025-06-17T15:15:54Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"DLA-4225-1","title":"gdk-pixbuf - security update","status":"published","published":"2025-06-23T00:00:00Z","modified":"2026-03-09T01:22:14.609002Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5946-1","title":"gdk-pixbuf - security update","status":"published","published":"2025-06-22T00:00:00Z","modified":"2026-03-09T02:09:35.865082Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0198","title":"Updated gdk-pixbuf2.0 packages fix security vulnerability","description":"It was discovered that incorrect bounds validation in the GIF decoder of\nthe GDK Pixbuf library may result in memory disclosure.\n","status":"published","published":"2025-06-27T05:44:15Z","modified":"2026-04-16T04:41:24.802165773Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15397-1","title":"gdk-pixbuf-devel-2.42.12-4.1 on GA media","description":"These are all security issues fixed in the gdk-pixbuf-devel-2.42.12-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-31T00:00:00Z","modified":"2026-03-23T04:53:43.547275Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20084-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function\n  (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114).\n- CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents (bsc#1245227).\n","status":"published","published":"2026-01-22T14:36:57Z","modified":"2026-03-23T04:54:43.521187Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:02954-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory contents leak (bsc#1245227)\n- CVE-2025-7345: Fixed heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#1246114)\n","status":"published","published":"2025-08-21T13:42:54Z","modified":"2026-03-23T04:48:41.797817Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02963-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory contents leak (bsc#1245227)\n- CVE-2025-7345: Fixed heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#1246114)\n","status":"published","published":"2025-08-22T12:52:12Z","modified":"2026-03-23T04:49:49.236734Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03373-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n  \n- CVE-2025-7345: heap buffer overflow in gdk‑pixbuf within the `gdk_pixbuf__jpeg_image_load_increment` function\n  (bsc#1246114).\n- CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents (bsc#1245227).\n","status":"published","published":"2025-09-26T12:26:29Z","modified":"2026-03-23T04:48:02.752748Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20694-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-7345: Uninitialized memory could lead to leak arbitrary memory contents (bsc#1246114).\n- CVE-2025-6199: Heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#1245227).\n","status":"published","published":"2025-09-08T13:49:35Z","modified":"2026-03-23T04:49:01.614332Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20748-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-6199: Fixed uninitialized memory leading to arbitrary memory leak (bsc#1245227)\n- CVE-2025-7345: Fixed heap buffer overflow within the gdk_pixbuf__jpeg_image_load_increment function (bsc#1246114)\n","status":"published","published":"2025-09-16T06:29:08Z","modified":"2026-03-23T04:49:03.614853Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2026:20128-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function\n  (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114).\n- CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents (bsc#1245227).\n","status":"published","published":"2026-01-22T14:36:50Z","modified":"2026-03-23T04:52:36.719888Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20156-1","title":"Security update for gdk-pixbuf","description":"This update for gdk-pixbuf fixes the following issues:\n\n- CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function\n  (io-jpeg.c) and in glib g_base64_encode_step (bsc#1246114).\n- CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents (bsc#1245227).\n","status":"published","published":"2026-01-22T14:36:50Z","modified":"2026-03-23T04:52:38.294368Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"USN-7662-1","title":"gdk-pixbuf vulnerabilities","description":"It was discovered that GDK-Pixbuf incorrectly handled certain\nGIF files. An attacker could possibly use this issue to expose\nsensitive information. This issue only affected Ubuntu 25.04,\nUbuntu 24.04 LTS, Ubuntu 22.04 LTS, and  Ubuntu 20.04 LTS.\n(CVE-2025-6199)\n\nIt was discovered that GDK-Pixbuf incorrectly handled certain JPEG files.\nAn attacker could possibly use this issue to cause a crash or execute\narbitrary code. (CVE-2025-7345)\n","status":"published","published":"2025-07-22T11:10:56Z","modified":"2026-06-25T13:32:30.681466829Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}