GNOME Shell crash from invalid icon dimensions (CVE-2026-110355)
Original title: USN-8971-1: GNOME Shell vulnerability
Remote search providers can cause crashes or memory exposure in GNOME Shell by sending unvalidated icons.
Ubuntu Security Notices report a GNOME Shell flaw. Icon dimensions are not properly validated when processing requests from a remote search provider. This can lead to a crash and denial of service or exposure of sensitive memory data. No specific versions, patches, or exploitation were mentioned.
- Icon dimensions not validated from remote search providers.
- Possible crash and denial of service.
- Sensitive information from memory may be exposed.
- No CVE id stated in the notice.
- No public exploits or in-the-wild attacks reported.
Impact: denial of service or exposure of sensitive information from memory
- Vendors
- Ubuntu
- Products
- GNOME Shell
From the original article
It was discovered that GNOME Shell did not properly validate icon dimensions when processing icons from a remote search provider. An attacker could possibly use this issue to cause GNOME Shell to crash, resulting in a denial of service, or expose sensitive information from memory.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.