Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gdk-pixbuf:2.36.6:*:*:*:*:*:*:*

part: a version: 2.36.6 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGdk Pixbuf (b8fc5aa6-73cf-5f16-88bb-ecf394031ebb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gnome/gdk-pixbuf purl2cpe 2026-06-01 10:17:24.435461
pkg:rpm/opensuse/gdk-pixbuf purl2cpe 2026-06-01 10:17:24.435462

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-2870 vulnerable 2026-06-08 05:09:26.088367 Details available
HIGH (8.8)
An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when compiled with Clang. A specially crafted tiff file can cause a heap-overflow resulting in remote code execution. An attacker can send a file or a URL to trigger this vulnerability.
Published: 2017-09-05T18:00:00.000Z
Updated: 2024-09-16T17:48:57.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2862 vulnerable 2026-06-08 05:09:26.081921 Details available
HIGH (8.8)
An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.
Published: 2017-09-05T18:00:00.000Z
Updated: 2024-09-16T22:30:21.047Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.