CVE-2026-18090

Public on 2026-09-08
Modified on 2026-09-08
Description
A security flaw has been discovered in gdk-pixbuf. This issue affects the function uncompress of the component ICNS Handler. Performing a manipulation results in out-of-bounds read. The attack may be initiated remotely.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
4.4
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core gdk-pixbuf2 Pending Fix
Amazon Linux 2023 gdk-pixbuf2 Pending Fix
Amazon Linux 2027 Preview gdk-pixbuf2 Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L