Back to CVE Browser

CVE-2019-20326

HIGH

7.8

CVSS Severity Score

EPSS Score0.0010%

EPSS Percentile39.42th

PublishedMar 16, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.

Affected Platforms (CPE)

📦

Gnome

Gthumb

< 3.8.3

📦

Linuxmint

Pix

< 2.4.5

💻

Debian

Debian Linux

= 9.0

References & Advisories

🔗 https://github.com/Fysac/CVE-2019-20326

🔗 https://gitlab.gnome.org/GNOME/gthumb/commit/4faa5ce2358812d23a1147953ee76f59631590ad

🔗 https://gitlab.gnome.org/GNOME/gthumb/commit/ca8f528209ab78935c30e42fe53bdf1a24f3cb44

🔗 https://gitlab.gnome.org/GNOME/gthumb/commits/master/extensions/cairo_io/cairo-image-surface-jpeg.c

🔗 https://lists.debian.org/debian-lts-announce/2021/08/msg00027.html

🔗 https://security.gentoo.org/glsa/202008-05

🔗 https://github.com/Fysac/CVE-2019-20326

🔗 https://gitlab.gnome.org/GNOME/gthumb/commit/4faa5ce2358812d23a1147953ee76f59631590ad

Related Vulnerabilities

CVE-2018-187187.8

An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-con...

CVE-2020-364275.5

GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...