CVE-2017-2862

CVE-2017-2862 is a heap overflow vulnerability in Gdk-Pixbuf 2.36.6, specifically within the gdk_pixbuf__jpeg_image_load_increment function, affecting Debian and GNOME products. A specially crafted JPEG file can trigger this flaw, potentially leading to remote code execution. With a CVSS score of 7.8 (High), it requires user interaction (UI:R) but has low attack complexity (AC:L), allowing an attacker to achieve high confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.