RHEL 5 : gdk-pixbuf (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdk-pixbuf: heap-based overflow caused by invalid palette size CVE-2017-12447 - Integer overflow in...

AZL-34726 CVE-2022-48622 affecting package gdk-pixbuf2 for versions less than 2.42.10-2

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

ALPINE-CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

UBUNTU-CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

PT-2024-5877

Name of the Vulnerable Software and Affected Versions GdkPixbuf versions through 2.42.10 Description The issue is related to heap memory corruption in the ANI decoder when parsing chunks in a crafted .ani file. This corruption can occur in the ani load chunk function and may allow an attacker to...

CVE-2022-48622

CVE-2022-48622 affects GNOME GdkPixbuf (gdk-pixbuf2) through 2.42.10. The ANI decoder can heap-corrupt when parsing crafted .ani files (function ani_load_chunk in io-ani.c), with impact to denial of service or potential code execution. Affected advisories note fixes in newer gdk-pixbuf2 releases ...

CVE-2022-48622: Out-of-bounds Write

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

gdk-pixbuf security vulnerability

gdk-pixbuf is an image loading library. A security vulnerability exists in gdk-pixbuf version 2.42.10 and earlier. An attacker exploiting this vulnerability could overwrite heap metadata, resulting in a denial of service or code execution attack...

Moderate Photon OS Security Update - PHSA-2023-5.0-91-0141

Updates of 'gdk-pixbuf' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0141

Updates of 'gdk-pixbuf' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0506

Updates of 'traceroute', 'gdk-pixbuf' packages of Photon OS have been released...

Medium: gdk-pixbuf2

Issue Overview: GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. CVE-2021-44648 Affected Packages: gdk-pixbuf2 Issue Correction: Run dnf update gdk-pixbuf2...

Medium: gdk-pixbuf2

Issue Overview: GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit...

Important Photon OS Security Update - PHSA-2023-5.0-0054

Updates of 'gdk-pixbuf', 'perl', 'curl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0054

Updates of 'gdk-pixbuf', 'curl', 'perl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0423

Updates of 'gdk-pixbuf' packages of Photon OS have been released...

gdk-pixbuf: heap-buffer overflow when decoding the lzw compressed stream of image data

A flaw was found in gdk-pixbuf. The vulnerability occurs due to the index overwriting in the lzwdecodernew function, leading to a heap buffer overflow. This flaw allows an attacker to input a specially crafted GIF file, leading to a crash or code execution...

Debian: Security Advisory (DLA-450-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...