Public bug reported:

After the security update of libexiv2-27 from 0.27.5-3ubuntu1 to
0.27.5-3ubuntu1.1 (applied automatically on 2026-03-19 at 09:26),
Gwenview and GIMP crash with a segmentation fault when opening 32-bit
HDR PNG files (32-bit RGB+alpha).

Steps to reproduce:

Update libexiv2-27 to 0.27.5-3ubuntu1.1
Open a 32-bit HDR PNG file in Gwenview or GIMP

Expected behavior: Image opens normally, as it did with 0.27.5-3ubuntu1.

Actual behavior: Segmentation fault in
Gwenview::ImageMetaInfoModel::setExiv2Image(Exiv2::Image const*). The
crash occurs during Exiv2 metadata parsing, not during image decoding
itself.

Workaround: Downgrade to libexiv2-27 0.27.5-3ubuntu1 resolves the issue.

Origin of test files: Screenshots taken via Firefox Mobile DevTools console. 
These are valid 32-bit PNG files confirmed by pngcheck:
OK: Screen Shot 2026-03-19 at 10.56.03.png (3240x5760, 32-bit RGB+alpha, 
non-interlaced, 97.2%)
OK: Screen Shot 2026-03-19 at 11.00.50.png (1080x1920, 32-bit RGB+alpha, 
non-interlaced, 94.9%)

Stacktrace (Gwenview):
Application: Gwenview (gwenview), signal: Segmentation fault

[KCrash Handler]
#4  0x00007f2331b3f74e in 
Gwenview::ImageMetaInfoModel::setExiv2Image(Exiv2::Image const*) () from 
/lib/x86_64-linux-gnu/libgwenviewlib.so.5
#5  0x00007f2331b060b0 in 
Gwenview::Document::setExiv2Image(std::unique_ptr<Exiv2::Image, 
std::default_delete<Exiv2::Image> >) () from 
/lib/x86_64-linux-gnu/libgwenviewlib.so.5
#6  0x00007f2331b110c5 in ?? () from /lib/x86_64-linux-gnu/libgwenviewlib.so.5
#7  0x00007f232fed2793 in ?? () from /lib/x86_64-linux-gnu/libQt5Core.so.5
#8  0x00007f232fcb80f5 in QFutureWatcherBase::event(QEvent*) () from 
/lib/x86_64-linux-gnu/libQt5Core.so.5
#9  0x00007f2330c0e713 in QApplicationPrivate::notify_helper(QObject*, QEvent*) 
() from /lib/x86_64-linux-gnu/libQt5Widgets.so.5
#10 0x00007f232fe9ae3a in QCoreApplication::notifyInternal2(QObject*, QEvent*) 
() from /lib/x86_64-linux-gnu/libQt5Core.so.5
#11 0x00007f232fe9df27 in QCoreApplicationPrivate::sendPostedEvents(QObject*, 
int, QThreadData*) () from /lib/x86_64-linux-gnu/libQt5Core.so.5
#12 0x00007f232fef4a67 in ?? () from /lib/x86_64-linux-gnu/libQt5Core.so.5
#13 0x00007f232d723d3b in g_main_context_dispatch () from 
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#14 0x00007f232d779488 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#15 0x00007f232d7213e3 in g_main_context_iteration () from 
/lib/x86_64-linux-gnu/libglib-2.0.so.0
#16 0x00007f232fef40b8 in 
QEventDispatcherGlib::processEvents(QFlags<QEventLoop::ProcessEventsFlag>) () 
from /lib/x86_64-linux-gnu/libQt5Core.so.5
#17 0x00007f232fe9975b in 
QEventLoop::exec(QFlags<QEventLoop::ProcessEventsFlag>) () from 
/lib/x86_64-linux-gnu/libQt5Core.so.5
#18 0x00007f232fea1cf4 in QCoreApplication::exec() () from 
/lib/x86_64-linux-gnu/libQt5Core.so.5
#19 0x000055a0c419557b in ?? ()
#20 0x00007f232f7b5d90 in __libc_start_call_main () from 
/lib/x86_64-linux-gnu/libglibc.so.6

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: libexiv2-27 0.27.5-3ubuntu1
ProcVersionSignature: Ubuntu 5.15.0-173.183-generic 5.15.198
Uname: Linux 5.15.0-173-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair nvidia_modeset 
nvidia
ApportVersion: 2.20.11-0ubuntu82.10
Architecture: amd64
CasperMD5CheckResult: unknown
Date: Thu Mar 19 11:10:01 2026
InstallationDate: Installed on 2019-11-21 (2309 days ago)
InstallationMedia: Xubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
SourcePackage: exiv2
UpgradeStatus: Upgraded to jammy on 2023-03-22 (1092 days ago)

** Affects: exiv2 (Ubuntu)
     Importance: Undecided
         Status: Confirmed


** Tags: amd64 apport-bug jammy

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2144878

Title:
  libexiv2-27 0.27.5-3ubuntu1.1 segfaults on 32-bit HDR PNG files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/exiv2/+bug/2144878/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to