Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-103641

No fix known EPSS <1%CVSS 5.5

A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. Opening a crafted HDR file crashes the application that uses the loader.

Published 2026-10-01 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

Distro releases

ReleasePackageFixed in
Debian 12geglno fix
Debian 13geglno fix
Debian 14geglno fix
Ubuntu 22.04 LTSgeglno fix
Ubuntu 24.04 LTSgeglno fix
Ubuntu 26.04 LTSgeglno fix
Ubuntu 26.10geglno fix
Ubuntu Pro 16.04 LTSgeglno fix
Ubuntu Pro 18.04 LTSgeglno fix
Ubuntu Pro 20.04 LTSgeglno fix