CVE Feed

    Dashboard / CVE / CVE-2015-7673

    CVE-2015-7673

    io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.

    Published:Oct 1, 2015
    Last Modified:Apr 12, 2025
    EPS:Oct 26, 2015
    EPSS Score:0.0139
    CVSS Score:6.8

    Affected Products

    Vendor
    Gnome
    Product
    Gdk-pixbuf
    Vendor
    Opensuse
    Product
    Opensuse

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-81893 (CVSS 4.7) — A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile mar…
    CVE-2026-5201 (CVSS 7.5) — A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG i…
    CVE-2021-46829 (CVSS 7.8) — GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearin…
    CVE-2021-20240 (CVSS 8.8) — A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds wr…
    CVE-2020-29385 (CVSS 5.5) — GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the func…
    CVE-2017-2862 (CVSS 7.8) — An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality o…
    CVE-2017-12447 (CVSS 7.8) — GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attacker…
    CVE-2017-1000422 (CVSS 8.8) — Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function result…
    CVE-2017-6313 (CVSS 7.1) — Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers…
    CVE-2017-6312 (CVSS 5.5) — Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (se…

    References

    http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.0.news
    http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html
    http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html
    http://www.debian.org/security/2015/dsa-3378
    http://www.openwall.com/lists/oss-security/2015/10/01/3
    http://www.openwall.com/lists/oss-security/2015/10/02/9
    http://www.securityfocus.com/bid/76953
    http://www.ubuntu.com/usn/USN-2767-1
    https://git.gnome.org/browse/gdk-pixbuf/commit/?id=19f9685dbff7d1f929c61cf99188df917a18811d
    https://git.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e
    https://git.gnome.org/browse/gdk-pixbuf/commit/?id=edf6fb8d856574bc3bb3a703037f56533229267c
    https://security.gentoo.org/glsa/201512-05
    http://ftp.gnome.org/pub/gnome/sources/gdk-pixbuf/2.32/gdk-pixbuf-2.32.0.news
    http://lists.opensuse.org/opensuse-updates/2016-03/msg00124.html
    http://lists.opensuse.org/opensuse-updates/2016-06/msg00006.html
    http://www.debian.org/security/2015/dsa-3378
    http://www.openwall.com/lists/oss-security/2015/10/01/3
    http://www.openwall.com/lists/oss-security/2015/10/02/9
    http://www.securityfocus.com/bid/76953
    http://www.ubuntu.com/usn/USN-2767-1
    https://git.gnome.org/browse/gdk-pixbuf/commit/?id=19f9685dbff7d1f929c61cf99188df917a18811d
    https://git.gnome.org/browse/gdk-pixbuf/commit/?id=6ddca835100107e6b5841ce9d56074f6d98c387e
    https://git.gnome.org/browse/gdk-pixbuf/commit/?id=edf6fb8d856574bc3bb3a703037f56533229267c
    https://security.gentoo.org/glsa/201512-05

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High