CVE-2015-7673: Gnome Gdk-Pixbuf

Medium severity, CVSS 6.8. EPSS: 5.4% chance of exploitation in the next 30 days.

io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) and possibly execute arbitrary code via a crafted Truevision TGA (TARGA) file.

Affected products

• Gnome Gdk-Pixbuf: up to and including 2.31.4
• Opensuse Opensuse: version 13.2 only

Published 2015-10-26. Last modified 2026-06-17.