VULNERABILITY INTELLIGENCE

CVE-2012-2370

CVSS score5 MEDIUM
EPSS probability4.10%
CISA KEVNot currently listed
Published2012-08-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Multiple integer overflows in the read_bitmap_file_data function in io-xbm.c in gdk-pixbuf before 2.26.1 allow remote attackers to cause a denial of service (application crash) via a negative (1) height or (2) width in an XBM file, which triggers a heap-based buffer overflow.

Primary references