CVE-2021-44648

 

Published at: - 12-01-2022 02:15

Last modified: - 12-09-2022 10:15

Total changes: - 5

Description

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/136
• https://sahildhar.github.io/blogpost/GdkPixbuf-Heap-Buffer-Overflow-in-lzw_decoder_new/
• FEDORA-2022-a16e5d72fc-Mailing List, Third Party Advisory
• FEDORA-2022-725db8230b-Mailing List, Third Party Advisory
• DSA-5228-

 

Keywords

NVD

 

CVE-2021-44648

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures