CVE-2017-6312

MEDIUM5.5EPSS 0.32%

Published: 3/10/2017Modified: 4/28/2026

Also known as:ALPINE-CVE-2017-6312DEBIAN-CVE-2017-6312

Description

Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted image entry offset in an ICO file, which triggers an out-of-bounds read, related to compiler optimizations.

Affected packages (2)

Alpine/gdk-pixbuffrom 0, < 2.36.6-r1
Debian/gdk-pixbuffrom 0, < 2.36.11-2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2017-6312
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2017-6312