DEBIAN-CVE-2016-6855

DEBIAN-CVE-2016-6855 PUBLISHED CVSS 7.5 HIGH

Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup.

Risk Scores

CVSS 3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:13	eog	0, 0, 0
Debian:12	eog	0, 0, 0
Debian:14	eog	0, 0, 0
Debian:11	eog	0, 0, 0

Timeline

Sep 7, 2016 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2016-6855 advisory

Open in Interactive Console →