AZL-65048
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-65048.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-65048
- Upstream
- Published
- 2025-07-08T14:15:32Z
- Modified
- 2026-04-21T04:32:39.063584Z
- Summary
- CVE-2025-7345 affecting package gdk-pixbuf2 for versions less than 2.40.0-8
- Details
-
A flaw exists in gdk‑pixbuf within the gdk_pixbuf__jpegimageloadincrement function (io-jpeg.c) and in glib’s gbase64encodestep (glib/gbase64.c). When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory, potentially causing application crashes or arbitrary code execution.
- References