Buffer Overflow Vulnerability in Eye of GNOME Image Viewer
CVE-2026-118475
3.6LOW
What is CVE-2026-118475?
A security flaw in Eye of GNOME allows attackers to exploit malformed PNG images containing incorrect color profile metadata. This vulnerability occurs when the application improperly handles chunk boundaries while searching for a null terminator. By enticing users to open specially crafted images, an attacker may cause the application to read outside the allocated buffer, potentially leading to application crashes or exposing sensitive memory content, thereby initiating a Denial of Service (DoS) attack.
References
CVSS V3.1
Score:
3.6
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Ege BALCI for reporting this issue.