CyberRota Analysis
AI-GeneratedA vulnerability in gdk-pixbuf allows remote attackers to exploit a heap out-of-bounds read by supplying a specially crafted Apple Icon Image (.icns) file, leading to potential application crashes or information disclosure from adjacent memory. This issue arises from inadequate boundary validation in the uncompress() function during the decompression of RLE-encoded ICNS data. Organizations utilizing gdk-pixbuf should prioritize patching this vulnerability to mitigate risks of denial of service and sensitive data exposure.
Original NVD Description
A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during decompression. This can lead to a denial of service, where the application crashes, or to information disclosure, potentially revealing sensitive data from adjacent memory.