CVE-2012-2370

CVE-2012-2370 is an integer overflow vulnerability in the gdk-pixbuf library, affecting versions prior to 2.26.1, specifically within the read_bitmap_file_data function. Attackers can exploit this by crafting malicious XBM files with negative height or width values, leading to a heap-based buffer overflow and a denial of service (application crash). Rated with a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, but only impacts availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.