Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gthumb:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGthumb (88544d60-929e-5d2b-b627-4e5d46cb9e88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gthumb purl2cpe 2026-06-01 10:17:24.932701
pkg:deb/ubuntu/gthumb purl2cpe 2026-06-01 10:17:24.932704
pkg:github/gnome/gthumb purl2cpe 2026-06-01 10:17:24.932707
pkg:rpm/fedora/gthumb purl2cpe 2026-06-01 10:17:24.932709
pkg:rpm/opensuse/gthumb purl2cpe 2026-06-01 10:17:24.932712
pkg:sourceforge/gthumb purl2cpe 2026-06-01 10:17:24.932715

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36427 vulnerable 2026-06-08 05:25:48.849828 Details available
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.
Published: 2021-07-19T15:20:01.000Z
Updated: 2024-08-04T17:30:07.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20326 vulnerable 2026-06-08 05:13:40.414652 Details available
A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.
Published: 2020-03-16T21:33:36.000Z
Updated: 2024-08-05T02:39:09.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18718 vulnerable 2026-06-08 05:11:14.608346 Details available
An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.
Published: 2018-10-28T00:00:00.000Z
Updated: 2024-08-05T11:16:00.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.