Lucene search

K
redhatRedHatRHSA-2024:3834
HistoryJun 11, 2024 - 6:27 p.m.

(RHSA-2024:3834) Moderate: gdk-pixbuf2 security update

2024-06-1118:27:29
access.redhat.com
3
gdk-pixbuf2
image loading library
security fix
heap memory corruption
cvss score
cve-2022-48622
gtk+
clutter

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

The gdk-pixbuf2 packages provide an image loading library that can be extended
by loadable modules for new image formats. It is used by toolkits such as GTK+
or clutter.

Security Fix(es):

  • gdk-pixbuf2: heap memory corruption on gdk-pixbuf (CVE-2022-48622)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low