CVE-2016-6352

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via crafted dimensions in an ICO file.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2016-09/msg00040.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/13/11Exploit, Release Notes
http://www.openwall.com/lists/oss-security/2016/07/26/11Third Party Advisory
http://www.ubuntu.com/usn/USN-3085-1Third Party Advisory
https://bugzilla.gnome.org/show_bug.cgi?id=769170Exploit, Issue Tracking, Third Party Advisory, VDB Entry
https://git.gnome.org/browse/gdk-pixbuf/commit/?id=88af50a864195da1a4f7bda5f02539704fbda599Exploit, Vendor Advisory
https://git.gnome.org/browse/gdk-pixbuf/tree/NEWS?id=640134c46221689d263369872937192e4484c83bRelease Notes, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html
http://lists.opensuse.org/opensuse-updates/2016-09/msg00040.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/07/13/11Exploit, Release Notes
http://www.openwall.com/lists/oss-security/2016/07/26/11Third Party Advisory
http://www.ubuntu.com/usn/USN-3085-1Third Party Advisory
https://bugzilla.gnome.org/show_bug.cgi?id=769170Exploit, Issue Tracking, Third Party Advisory, VDB Entry
https://git.gnome.org/browse/gdk-pixbuf/commit/?id=88af50a864195da1a4f7bda5f02539704fbda599Exploit, Vendor Advisory
https://git.gnome.org/browse/gdk-pixbuf/tree/NEWS?id=640134c46221689d263369872937192e4484c83bRelease Notes, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2019/12/msg00025.html

Timeline

Published: Oct 3, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-63536.5Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level CVE-2016-63549.8Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial CVE-2016-63557.5Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to CVE-2016-63567.5A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthen CVE-2016-63577.5A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ES CVE-2016-63587.5A vulnerability in local FTP to the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a partial CVE-2016-63596.1Cross-site scripting (XSS) vulnerability in Cisco Transport Gateway Installation Software 4.1(4.0) on Smart Call Home Transport Gateway devi CVE-2016-63607.5A vulnerability in Advanced Malware Protection (AMP) for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) could allow CVE-2016-63616.5The Aggregated MAC Protocol Data Unit (AMPDU) implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 an CVE-2016-63627.8Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local CVE-2016-63636.5The rate-limit feature in the 802.11 protocol implementation on Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.121.0 an CVE-2016-63647.5The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended acce