CVE catalog

CVE-2026-16768

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: Jun 8, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.40% · Oct 25, 2026

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palette indices and rendered as RGB pixel values in the output image, allowing an attacker to extract heap content via the generated output, such as a thumbnail.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	gdk-pixbuf	sid	`2.44.8+dfsg-1`	vulnerable
Debian	gdk-pixbuf	forky	`2.44.8+dfsg-1`	vulnerable
Debian	gdk-pixbuf	trixie	`2.42.12+dfsg-4+deb13u1`	vulnerable
Debian	gdk-pixbuf	trixie-security	`2.42.12+dfsg-4+deb13u1`	vulnerable
Debian	gdk-pixbuf	bookworm	`2.42.10+dfsg-1+deb12u4`	vulnerable
Debian	gdk-pixbuf	bookworm-security	`2.42.10+dfsg-1+deb12u4`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	gdk-pixbuf	source	sid	`(unfixed)`	not yet assigned	Not reported	[1143155]
Debian	gdk-pixbuf	source	forky	`(unfixed)`	not yet assigned	Not reported	[1143155]
Debian	gdk-pixbuf	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1143155]
Debian	gdk-pixbuf	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1143155]

[Debian bug #1143155]

Notes

[trixie] gdk-pixbuf: Minor issue, revisit when/if a fix is available for the C-based legacy implementation [bookworm] gdk-pixbuf: Minor issue; bounded OOB read in the ICO palette lookup in OneLine8()/OneLine4(), leaks heap bytes into the rendered image; unfixed upstream

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[gdk-pixbuf-tests]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
[gir1.2-gdkpixbuf-2.0]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
[libgdk-pixbuf-2.0-0]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
[libgdk-pixbuf2.0-bin]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
[libgdk-pixbuf2.0-common]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · all · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · all · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
[libgdk-pixbuf-2.0-dev]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · amd64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · arm64 · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
[libgdk-pixbuf2.0-doc]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.10+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · all · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12
- 2.42.10+dfsg-1+deb12u4 · all · bookworm-security
  Affected
  nvd · gdk-pixbuf · debian · bookworm; nvd · gdk-pixbuf · debian · 12

[Debian 13 (Trixie)]

[gdk-pixbuf-tests]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
[gir1.2-gdkpixbuf-2.0]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
[libgdk-pixbuf-2.0-0]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
[libgdk-pixbuf2.0-bin]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
[libgdk-pixbuf2.0-common]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · all · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · all · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · all · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · all · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
[libgdk-pixbuf-2.0-dev]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · amd64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · arm64 · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
[libgdk-pixbuf2.0-doc]Affected
Source package: [gdk-pixbuf]
Details (4)
- 2.42.12+dfsg-4+deb13u1 · all · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · all · trixie
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · all · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13
- 2.42.12+dfsg-4+deb13u1 · all · trixie-security
  Affected
  nvd · gdk-pixbuf · debian · 13

Observed: Oct 27, 2026, 7:15:50 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]