CVE-2026-91786
Publication date 15 September 2026
Last updated 3 November 2026
Ubuntu priority
Description
A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon dimensions, leading to an out-of-bounds read. This can cause the GNOME Shell process to crash, disrupting the user's session, and potentially disclose sensitive information from adjacent memory.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| gnome-shell | 26.10 stonking |
Not affected
|
| 26.04 LTS resolute |
Fixed in 50.1-0ubuntu1.5
|
|
| 24.04 LTS noble |
Fixed in 46.0-0ubuntu6~24.04.17
|
|
| 22.04 LTS jammy |
Fixed in 42.9-0ubuntu2.4
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
6.1 · Medium
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
References
Related Ubuntu Security Notices (USN)
- USN-8971-1
- GNOME Shell vulnerability
- 3 November 2026