GUIX security advisories
The table below lists published security advisories for GUIX, newest first. Click a GHSA ID for full details.
| Published | GHSA ID | CVE ID | Summary | Severity |
|---|---|---|---|---|
2026‑10‑02 |
CVE‑2026‑92454 |
JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode |
Medium |
|
2026‑10‑02 |
CVE‑2026‑92449 |
Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena |
High |
|
2026‑10‑02 |
CVE‑2026‑92446 |
GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader |
High |
|
2026‑10‑02 |
CVE‑2026‑103414 |
Binary resource loader: font sizing and load passes desynchronise, causing a heap out-of-bounds write with attacker-controlled content |
High |
|
2026‑10‑02 |
CVE‑2026‑91189 |
GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme |
High |
|
2026‑10‑02 |
CVE‑2026‑91186 |
PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write |
High |
|
2026‑10‑02 |
CVE‑2026‑91059 |
JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size |
Medium |
|
2026‑10‑02 |
CVE‑2026‑91057 |
Out-of-bounds read when a multi-line text view string ends with a carriage return |
Medium |
|
2026‑10‑02 |
CVE‑2026‑102729 |
GUIX binary resource loader: a theme id past the resource’s theme count causes a heap out-of-bounds write |
Medium |