The gdk-pixbuf2 packages, which provide an extensible image loading library used by toolkits such as GTK+ and clutter, contain a heap-based buffer overflow vulnerability (CVE-2026-5201). This vulnerability can be triggered by processing a specially crafted JPEG image, leading to a denial of service condition. Red Hat has issued an important security advisory (RHSA-2026:19127) and released updated packages for Red Hat Enterprise Linux 10 to remediate this issue. The advisory references the fixed package version 2.42.12-4.el10_2.5 and provides instructions for applying the update.

Successful exploitation of this vulnerability results in a denial of service via a heap-based buffer overflow when processing malicious JPEG images. This can cause application crashes or service interruptions in software relying on gdk-pixbuf2 for image processing. There is no indication of known exploits in the wild at this time.

Red Hat has released an official security update that fixes this vulnerability in gdk-pixbuf2 version 2.42.12-4.el10_2.5 for Red Hat Enterprise Linux 10. Users should apply the update promptly by following Red Hat's published guidance at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.