A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.
References
Link | Resource |
---|---|
https://github.com/Fysac/CVE-2019-20326 | Exploit Third Party Advisory |
https://gitlab.gnome.org/GNOME/gthumb/commit/4faa5ce2358812d23a1147953ee76f59631590ad | Patch Vendor Advisory |
https://gitlab.gnome.org/GNOME/gthumb/commit/ca8f528209ab78935c30e42fe53bdf1a24f3cb44 | Vendor Advisory |
https://gitlab.gnome.org/GNOME/gthumb/commits/master/extensions/cairo_io/cairo-image-surface-jpeg.c | Vendor Advisory |
https://lists.debian.org/debian-lts-announce/2021/08/msg00027.html | Mailing List Third Party Advisory |
https://security.gentoo.org/glsa/202008-05 | Third Party Advisory |
Configurations
History
14 Sep 2021, 13:28
Type | Values Removed | Values Added |
---|---|---|
References | (MLIST) https://lists.debian.org/debian-lts-announce/2021/08/msg00027.html - Mailing List, Third Party Advisory | |
CPE | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
29 Aug 2021, 03:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2020-03-16 22:15
Updated : 2024-02-04 21:00
NVD link : CVE-2019-20326
Mitre link : CVE-2019-20326
CVE.ORG link : CVE-2019-20326
JSON object : View
Products Affected
gnome
- gthumb
linuxmint
- pix
debian
- debian_linux
CWE
CWE-787
Out-of-bounds Write