Critical severity9.0OSV Advisory· Published Apr 22, 2019· Updated Jun 17, 2026
CVE-2019-11460
CVE-2019-11460
Description
An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32 prior to 3.32.1.1. A compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl to push characters into the input buffer of the thumbnailer's controlling terminal, allowing an attacker to escape the sandbox if the thumbnailer has a controlling terminal. This is due to improper filtering of the TIOCSTI ioctl on 64-bit systems, similar to CVE-2019-10063.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
72.29.4, 2.91.5, 2.91.6, …+ 1 more
- (no CPE)range: 2.29.4, 2.91.5, 2.91.6, …
- (no CPE)range: <3.30.2.2, <3.32.1.1
- osv-coords5 versionspkg:rpm/opensuse/flatpak&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/gnome-desktop&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/gnome-desktop&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/gnome-desktop&distro=openSUSE%20Tumbleweedpkg:rpm/suse/flatpak&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015
< 0.10.4-lp150.8.1+ 4 more
- (no CPE)range: < 0.10.4-lp150.8.1
- (no CPE)range: < 3.26.2-150000.4.3.1
- (no CPE)range: < 3.26.2-150000.4.3.1
- (no CPE)range: < 40.4-1.3
- (no CPE)range: < 0.10.4-4.10.1
Patches
Vulnerability mechanics
References
5- gitlab.gnome.org/GNOME/gnome-desktop/issues/112nvdIssue TrackingPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-08/msg00088.htmlnvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V5V6EIUHYR7SNKCRIGYCD3UWNEGFNT2F/nvd
- security.gentoo.org/glsa/201908-28nvd
- usn.ubuntu.com/3994-1/nvd
News mentions
0No linked articles in our index yet.