Threats tagged 'ghsa-xrq2-m5w8-p5wg'

A heap buffer overflow vulnerability exists in gdk-pixbuf's gdk_pixbuf__jpeg_image_load_increment function and in glib's g_base64_encode_step when processing maliciously crafted JPEG images. This flaw can lead to out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution. The vulnerability has a CVSS score of 7.5, indicating high severity. Red Hat has issued a security advisory with updates available for Red Hat Enterprise Linux 9 to address this issue.