CVE-2017-2862

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-09-05 · updated 2026-06-17
Weakness: CWE-787

Description

An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability.

Affected products

Debian Linux: 8.0
GNOME Gdk-Pixbuf: 2.36.6

References

http://www.debian.org/security/2017/dsa-3978
http://www.securityfocus.com/bid/100541
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366
http://www.debian.org/security/2017/dsa-3978
http://www.securityfocus.com/bid/100541
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0366

Get alerted when CVE-2017-2862 or the next vulnerability affects your stack