# CVE-2026-18090

## Summary

- **CVE ID:** CVE-2026-18090
- **Severity:** MEDIUM
- **CVSS Score:** 6.1 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
- **CWE:** CWE-125
- **Published:** Sep 8, 2026
- **Last Modified:** Sep 9, 2026

## Description

A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image (.icns) file. The uncompress() function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during decompression. This can lead to a denial of service, where the application crashes, or to information disclosure, potentially revealing sensitive data from adjacent memory.

## Affected Products

No affected products listed.

## References

- [CNA](https://access.redhat.com/security/cve/CVE-2026-18090)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2517751)
- [CNA](https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/308)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.17%
- **EPSS Percentile:** 6.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._