Gnome Gthumb vulnerabilities

3 CVEs affecting Gnome Gthumb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-36427, published 2021-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-20326, published 2020-03-16. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. A heap-based buffer overflow in _cairo_image_surface_create_from_jpeg() in extensions/cairo_io/cairo-image-surface-jpeg.c in GNOME gThumb before 3.8.3 and Linux Mint Pix before 2.4.5 allows attackers…
CVE-2020-36427, published 2021-07-19. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.
CVE-2018-18718, published 2018-10-29. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method in dlg-contact-sheet.c because of two successive calls of g_free, each of which…