CVE-2026-103641
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Summary
A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader.
Affected Software
| Vendor | Product | Version Range | Status |
|---|
Weaknesses
- CWE-125: Out-of-bounds Read
Workarounds
Do not open untrusted Radiance HDR files (.hdr, .pic) in applications that load them through GEGL.
References
- https://access.redhat.com/security/cve/CVE-2026-103641
- https://bugzilla.redhat.com/show_bug.cgi?id=2544420
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.