CVE-2026-81893: Out-of-bounds Write in Red Hat Red Hat Enterprise Linux 10

The vulnerability in gdk-pixbuf occurs during ICC profile parsing of JPEG images containing chunked ICC profile markers. An error in parsing leaves stale size metadata after the profile buffer is freed. A subsequent memory allocation during the same decode operation can cause an out-of-bounds write, potentially crashing the application. The flaw affects gdk-pixbuf versions 2.26.4 and later. Exploitation requires an application linked against the vulnerable gdk-pixbuf to process a malicious JPEG image. Red Hat rates this issue as moderate impact and notes that a fix is available upstream in the gdk-pixbuf master branch, with a release containing the fix pending.

The vulnerability can cause an out-of-bounds write leading to application crashes (denial of service). There is no impact on confidentiality or integrity reported. Exploitation requires local access and user interaction to open a malicious JPEG image in an application using the vulnerable gdk-pixbuf library.

Red Hat advises avoiding opening or automatically indexing untrusted JPEG images with applications linked against vulnerable versions of gdk-pixbuf until an updated package is installed. A fix is available upstream but not yet released in Red Hat packages. Monitor the Red Hat advisory for updates and apply the fix once it is released.