# CVE-2025-6199: Gdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder CVE-2025-6199 is fixed in 16 products on 1 platform, first by DEBIAN-CVE-2025-6199, released June 17, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-6199 - Priority: Routine - CVSS: 3.3 (Low) - EPSS: 0.0021 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jun 17, 2025 - Weakness: Exposure of Sensitive Information to an Unauthorized Actor - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-6199 ## Description A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When aninvalid symbol is encountered during decompression, the decoder sets thereported output size to the full buffer length rather than the actualnumber of written bytes. This logic error results in uninitialized sectionsof the buffer being included in the output, potentially leaking arbitrarymemory contents in the processed image. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | gdk-pixbuf Debian 11.6 (bullseye) | 2.42.2+dfsg-1+deb11u3 | [DLA-4225-1](https://patchblox.com/security/data/fix/linux/dla-4225-1.md) | Jun 23, 2025 | | Linux | gdk-pixbuf Debian 12.15 (bookworm) | 2.42.10+dfsg-1+deb12u2 | [DSA-5946-1](https://patchblox.com/security/data/fix/linux/dsa-5946-1.md) | Jun 22, 2025 | | Linux | gdk-pixbuf Debian 13.5 (trixie) | 2.42.12+dfsg-3 | [DEBIAN-CVE-2025-6199](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6199.md) | Jun 17, 2025 | | Linux | gdk-pixbuf Debian 14 | 2.42.12+dfsg-3 | [DEBIAN-CVE-2025-6199](https://patchblox.com/security/data/fix/linux/debian-cve-2025-6199.md) | Jun 17, 2025 | | Linux | gdk-pixbuf opensuse-leap 15.6 | 2.42.12-150600.3.8.1 | [SUSE-SU-2025:02954-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02954-1.md) | Aug 21, 2025 | | Linux | gdk-pixbuf opensuse-leap 16.0 | 2.42.12-160000.3.1 | [OPENSUSE-SU-2026:20084-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20084-1.md) | Jan 22, 2026 | | Linux | gdk-pixbuf sles 15.6 | 2.42.12-150600.3.8.1 | [SUSE-SU-2025:02954-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02954-1.md) | Aug 21, 2025 | | Linux | gdk-pixbuf sles 15.7 | 2.42.12-150600.3.8.1 | [SUSE-SU-2025:02954-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02954-1.md) | Aug 21, 2025 | | Linux | gdk-pixbuf sles 16.0 | 2.42.12-160000.3.1 | [SUSE-SU-2026:20128-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20128-1.md) | Jan 22, 2026 | | Linux | gdk-pixbuf-tests Ubuntu 22.04.1 LTS (jammy) | 2.42.8+dfsg-1ubuntu0.4 | [gdk-pixbuf-tests 2.42.8+dfsg-1ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gdk-pixbuf-tests-2.42.8-dfsg-1ubuntu0.4.md) | Jul 8, 2025 | | Linux | gdk-pixbuf-tests Ubuntu 24.04.5 LTS (noble) | 2.42.10+dfsg-3ubuntu3.2 | [gdk-pixbuf-tests 2.42.10+dfsg-3ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gdk-pixbuf-tests-2.42.10-dfsg-3ubuntu3.2.md) | Jul 8, 2025 | | Linux | gdk-pixbuf-tests Ubuntu 25.04 (plucky) | 2.42.12+dfsg-2ubuntu0.1 | [gdk-pixbuf-tests 2.42.12+dfsg-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-gdk-pixbuf-tests-2.42.12-dfsg-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | gdk-pixbuf-tests Ubuntu 25.10 (questing) | 2.42.12+dfsg-4build1 | [gdk-pixbuf-tests 2.42.12+dfsg-4build1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-gdk-pixbuf-tests-2.42.12-dfsg-4build1.md) | Jul 8, 2025 | | Linux | gdk-pixbuf2 amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-debuginfo amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-debugsource amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-devel amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-devel-debuginfo amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-modules amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-modules-debuginfo amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-tests amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gdk-pixbuf2-tests-debuginfo amzn 2023 | 2.42.12-185.amzn2023 | [ALAS2023-2026-1553](https://patchblox.com/security/data/fix/linux/alas2023-2026-1553.md) | Apr 13, 2026 | | Linux | gir1.2-gdkpixbuf-2.0 Ubuntu 18.04.6 LTS (bionic) | 2.36.11-2ubuntu0.1~esm2 | [gir1.2-gdkpixbuf-2.0 2.36.11-2ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-gir1.2-gdkpixbuf-2.0-2.36.11-2ubuntu0.1-esm2.md) | Jul 8, 2025 | | Linux | gir1.2-gdkpixbuf-2.0 Ubuntu 20.04 LTS (focal) | 2.40.0+dfsg-3ubuntu0.5+esm1 | [gir1.2-gdkpixbuf-2.0 2.40.0+dfsg-3ubuntu0.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-gir1.2-gdkpixbuf-2.0-2.40.0-dfsg-3ubuntu0.5-esm1.md) | Jul 8, 2025 | | Linux | gir1.2-gdkpixbuf-2.0 Ubuntu 22.04.1 LTS (jammy) | 2.42.8+dfsg-1ubuntu0.4 | [gir1.2-gdkpixbuf-2.0 2.42.8+dfsg-1ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-gir1.2-gdkpixbuf-2.0-2.42.8-dfsg-1ubuntu0.4.md) | Jul 8, 2025 | | Linux | gir1.2-gdkpixbuf-2.0 Ubuntu 24.04.5 LTS (noble) | 2.42.10+dfsg-3ubuntu3.2 | [gir1.2-gdkpixbuf-2.0 2.42.10+dfsg-3ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-gir1.2-gdkpixbuf-2.0-2.42.10-dfsg-3ubuntu3.2.md) | Jul 8, 2025 | | Linux | gir1.2-gdkpixbuf-2.0 Ubuntu 25.04 (plucky) | 2.42.12+dfsg-2ubuntu0.1 | [gir1.2-gdkpixbuf-2.0 2.42.12+dfsg-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-gir1.2-gdkpixbuf-2.0-2.42.12-dfsg-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | gir1.2-gdkpixbuf-2.0 Ubuntu 25.10 (questing) | 2.42.12+dfsg-4build1 | [gir1.2-gdkpixbuf-2.0 2.42.12+dfsg-4build1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-gir1.2-gdkpixbuf-2.0-2.42.12-dfsg-4build1.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf-2.0-0 Ubuntu 22.04.1 LTS (jammy) | 2.42.8+dfsg-1ubuntu0.4 | [libgdk-pixbuf-2.0-0 2.42.8+dfsg-1ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgdk-pixbuf-2.0-0-2.42.8-dfsg-1ubuntu0.4.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf-2.0-0 Ubuntu 24.04.5 LTS (noble) | 2.42.10+dfsg-3ubuntu3.2 | [libgdk-pixbuf-2.0-0 2.42.10+dfsg-3ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgdk-pixbuf-2.0-0-2.42.10-dfsg-3ubuntu3.2.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf-2.0-0 Ubuntu 25.04 (plucky) | 2.42.12+dfsg-2ubuntu0.1 | [libgdk-pixbuf-2.0-0 2.42.12+dfsg-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libgdk-pixbuf-2.0-0-2.42.12-dfsg-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | libgdk-pixbuf-2.0-0 Ubuntu 25.10 (questing) | 2.42.12+dfsg-4build1 | [libgdk-pixbuf-2.0-0 2.42.12+dfsg-4build1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libgdk-pixbuf-2.0-0-2.42.12-dfsg-4build1.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-0 Ubuntu 18.04.6 LTS (bionic) | 2.36.11-2ubuntu0.1~esm2 | [libgdk-pixbuf2.0-0 2.36.11-2ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgdk-pixbuf2.0-0-2.36.11-2ubuntu0.1-esm2.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-0 Ubuntu 20.04 LTS (focal) | 2.40.0+dfsg-3ubuntu0.5+esm1 | [libgdk-pixbuf2.0-0 2.40.0+dfsg-3ubuntu0.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgdk-pixbuf2.0-0-2.40.0-dfsg-3ubuntu0.5-esm1.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-bin Ubuntu 18.04.6 LTS (bionic) | 2.36.11-2ubuntu0.1~esm2 | [libgdk-pixbuf2.0-bin 2.36.11-2ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgdk-pixbuf2.0-bin-2.36.11-2ubuntu0.1-esm2.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-bin Ubuntu 20.04 LTS (focal) | 2.40.0+dfsg-3ubuntu0.5+esm1 | [libgdk-pixbuf2.0-bin 2.40.0+dfsg-3ubuntu0.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgdk-pixbuf2.0-bin-2.40.0-dfsg-3ubuntu0.5-esm1.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-bin Ubuntu 22.04.1 LTS (jammy) | 2.42.8+dfsg-1ubuntu0.4 | [libgdk-pixbuf2.0-bin 2.42.8+dfsg-1ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgdk-pixbuf2.0-bin-2.42.8-dfsg-1ubuntu0.4.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-bin Ubuntu 24.04.5 LTS (noble) | 2.42.10+dfsg-3ubuntu3.2 | [libgdk-pixbuf2.0-bin 2.42.10+dfsg-3ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgdk-pixbuf2.0-bin-2.42.10-dfsg-3ubuntu3.2.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-bin Ubuntu 25.04 (plucky) | 2.42.12+dfsg-2ubuntu0.1 | [libgdk-pixbuf2.0-bin 2.42.12+dfsg-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libgdk-pixbuf2.0-bin-2.42.12-dfsg-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | libgdk-pixbuf2.0-bin Ubuntu 25.10 (questing) | 2.42.12+dfsg-4build1 | [libgdk-pixbuf2.0-bin 2.42.12+dfsg-4build1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libgdk-pixbuf2.0-bin-2.42.12-dfsg-4build1.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-common Ubuntu 18.04.6 LTS (bionic) | 2.36.11-2ubuntu0.1~esm2 | [libgdk-pixbuf2.0-common 2.36.11-2ubuntu0.1~esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libgdk-pixbuf2.0-common-2.36.11-2ubuntu0.1-esm2.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-common Ubuntu 20.04 LTS (focal) | 2.40.0+dfsg-3ubuntu0.5+esm1 | [libgdk-pixbuf2.0-common 2.40.0+dfsg-3ubuntu0.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libgdk-pixbuf2.0-common-2.40.0-dfsg-3ubuntu0.5-esm1.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-common Ubuntu 22.04.1 LTS (jammy) | 2.42.8+dfsg-1ubuntu0.4 | [libgdk-pixbuf2.0-common 2.42.8+dfsg-1ubuntu0.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libgdk-pixbuf2.0-common-2.42.8-dfsg-1ubuntu0.4.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-common Ubuntu 24.04.5 LTS (noble) | 2.42.10+dfsg-3ubuntu3.2 | [libgdk-pixbuf2.0-common 2.42.10+dfsg-3ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libgdk-pixbuf2.0-common-2.42.10-dfsg-3ubuntu3.2.md) | Jul 8, 2025 | | Linux | libgdk-pixbuf2.0-common Ubuntu 25.04 (plucky) | 2.42.12+dfsg-2ubuntu0.1 | [libgdk-pixbuf2.0-common 2.42.12+dfsg-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libgdk-pixbuf2.0-common-2.42.12-dfsg-2ubuntu0.1.md) | Jan 16, 2026 | | Linux | libgdk-pixbuf2.0-common Ubuntu 25.10 (questing) | 2.42.12+dfsg-4build1 | [libgdk-pixbuf2.0-common 2.42.12+dfsg-4build1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libgdk-pixbuf2.0-common-2.42.12-dfsg-4build1.md) | Jul 8, 2025 | --- Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.