https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:16:23.997474+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-48622 CVE-2022-48622 2026-10-10T21:16:23.999034+00:00

Affected: gnome gdkpixbuf

In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or code execution attack. This occurs in gdk_pixbuf_set_option() in gdk-pixbuf.c.

 https://cve.radiocsirt.org/vuln/usn-6806-1 USN-6806-1 — gdk-pixbuf vulnerability 2026-10-10T21:16:23.999090+00:00

Affected: Ubuntu:Pro:16.04:LTS: gdk-pixbuf, Ubuntu:Pro:18.04:LTS: gdk-pixbuf, Ubuntu:20.04:LTS: gdk-pixbuf, Ubuntu:22.04:LTS: gdk-pixbuf, Ubuntu:24.04:LTS: gdk-pixbuf

Pedro Ribeiro and Vitor Pedreira discovered that the GDK-PixBuf library did not properly handle certain ANI files. An attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or to possibly execute arbitrary code.