Design/Logic Flaw

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this...

CVE-2021-20240

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this...

CVE-2021-20240

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this...

CVE-2021-20240

CVE-2021-20240 affects the GNOME gdk-pixbuf library: versions before 2.42.0 are vulnerable to an integer wraparound that can cause an out‑of‑bounds write when loading crafted GIF images. The effect can crash applications and may allow code execution on the victim system. The connected OSV entries...

CVE-2021-20240

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this...

CVE-2021-20240

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this...

CVE-2021-20240: Integer Underflow (Wrap or Wraparound)

A flaw was found in gdk-pixbuf in versions before 2.42.0. An integer wraparound leading to an out of bounds write can occur when a crafted GIF image is loaded. An attacker may cause applications to crash or could potentially execute code on the victim system. The highest threat from this...

gdk-pixbuf:pixbuf_file_fuzzer: Heap-buffer-overflow in null_convert

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5821206520528896 Project: gdk-pixbuf Fuzzing Engine: honggfuzz Fuzz Target: pixbuffilefuzzer Job Type: honggfuzzasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Cras...

gdk-pixbuf:pixbuf_scale_fuzzer: Heap-buffer-overflow in g_base64_encode_step

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=5558597388992512 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: pixbufscalefuzzer Job Type: libfuzzerasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

openSUSE: Security Advisory for librsvg (openSUSE-SU-2021:0634-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

gdk-pixbuf is vulnerable to denial of service. The vulnerability exists due to an infinite lop inlzw.c in the function writeindexes...

gdk-pixbuf:pixbuf_scale_fuzzer: Index-out-of-bounds in start_pass_huff_decoder

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=6649500350414848 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: pixbufscalefuzzer Job Type: libfuzzerubsangdk-pixbuf Platform Id: linux Crash Type: Index-out-of-bounds Crash...

gdk-pixbuf:animation_fuzzer: Index-out-of-bounds in get_dht

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=6582281159442432 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: animationfuzzer Job Type: libfuzzerubsangdk-pixbuf Platform Id: linux Crash Type: Index-out-of-bounds Crash Address...

SUSE: Security Advisory (SUSE-SU-2018:2145-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2381-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:2195-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:0225-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:2195-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1950-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

gdk-pixbuf:pixbuf_file_fuzzer: Heap-buffer-overflow in null_convert

Project: https://gitlab.gnome.org/GNOME/gdk-pixbuf.git Detailed Report: https://oss-fuzz.com/testcase?key=6731565766934528 Project: gdk-pixbuf Fuzzing Engine: libFuzzer Fuzz Target: pixbuffilefuzzer Job Type: libfuzzerasangdk-pixbuf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Cras...