debian/gthumb vulnerabilities

Latest debian/gthumb CVEs

Newest publication first

1. DLA-2749-1 gthumb - security update

   Published 2021-08-29

   Unknown

2. CVE-2020-36427 GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.

   Published 2021-07-19

   Medium·CVSS 5.5 EPSS 0.71%

   GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.

3. CVE-2019-20326 A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers....

   Published 2020-03-16

   High·CVSS 7.8 EPSS 2.2%

   A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers to cause a crash and potentially execute arbitrary code via a crafted JPEG file.

4. DLA-2066-1 gthumb - security update

   Published 2020-01-13

   Unknown

5. DLA-1567-1 gthumb - security update

   Published 2018-11-05

   Unknown

6. CVE-2018-18718 An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which....

   Published 2018-10-28

   High·CVSS 7.8 EPSS 0.41%

   An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which frees the same buffer.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.