CVE-2019-20326: Buffer Overflow
A heap-based buffer overflow in cairoimagesurfacecreatefromjpeg() in extensions/cairoio/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-20326?
CVE-2019-20326 is a vulnerability that allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5.
What is the severity of CVE-2019-20326?
The severity of CVE-2019-20326 is high, with a severity value of 7.8.
What is the affected software for CVE-2019-20326?
The affected software for CVE-2019-20326 includes GNOME gThumb before version 3.8.3, Linux Mint Pix before version 2.4.5, and Debian Debian Linux version 9.0.
How does CVE-2019-20326 work?
CVE-2019-20326 works by exploiting a heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() function in GNOME gThumb and Linux Mint Pix, allowing attackers to potentially execute arbitrary code via a crafted JPEG file.
How do I fix CVE-2019-20326?
To fix CVE-2019-20326, users should update to the latest versions of GNOME gThumb and Linux Mint Pix, which are 3.8.3 and 2.4.5 respectively.