Heap-based Buffer Overflow in _cairo_image_surface_create_from_jpeg() in gThumb and Pix

Heap-based Buffer Overflow in _cairo_image_surface_create_from_jpeg() in gThumb and Pix

CVE-2019-20326 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.