VIR Vulnerability Intelligence Relay

CVE-2015-4491

medium
Published 2015-08-16 · Modified 2026-05-06
CVSS v3
—
CVSS v2
6.8
VIR risk
6.8

Description

Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Linux, Google Chrome on Linux, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via crafted bitmap dimensions that are mishandled during scaling.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2015-4491

vendor Authored 2026-05-27

Vendor advisory: security@mozilla.org — http://www.mozilla.org/security/announce/2015/mfsa2015-88.html

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2015-4491.html

OS impact
OSVersionStatusFixed in
suse slesaffected
debian debianbookwormfixed2.31.7-1
debian debianbullseyefixed2.31.7-1
debian debianforkyfixed2.31.7-1
debian debiansidfixed2.31.7-1
debian debiantrixiefixed2.31.7-1
ubuntu ubuntu12.04affected
ubuntu ubuntu14.04affected
ubuntu ubuntu15.04affected
suse suse13.1affected
suse suse13.2affected
linux linux-kernelnot-affected
fedora fedora21affected
fedora fedora22affected

Application impact
VendorProductVersionsFixed
gnomegdk-pixbuf{"endIncluding":"2.31.4"}
gcp googlechrome-
mozilla mozillafirefox{"endIncluding":"39.0.3"}
mozilla mozillafirefox38.0
mozilla mozillafirefox38.0.1
mozilla mozillafirefox38.0.5
mozilla mozillafirefox38.1.0

References

CWEs

CWE-189

Verify integrity in audit chain (admin only). AS-IS.