CVE-2022-23435

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service...

PT-2022-15993

Name of the Vulnerable Software and Affected Versions android-gif-drawable versions prior to 1.2.24 Description The issue is related to the decoding.c file in android-gif-drawable, where it does not limit the maximum length of a comment. This leads to a denial of service. Recommendations For...

CVE-2022-23435: Undefined Security Weakness

decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service...

Android-Gif-Drawable input validation error vulnerability

Android-Gif-Drawable is Views and Drawable for displaying animated Gifs on Android. An input validation error vulnerability exists in android-gif-drawable that stems from the product's decode.c file not limiting the length of comments. This vulnerability can be exploited to cause a denial of...

CVE-2021-0652

In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0652

In VectorDrawable::VectorDrawable of VectorDrawable.java, there is a possible way to introduce a memory corruption due to sharing of not thread-safe objects. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2021-0478

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for...

CVE-2021-0478

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for...

Android-Gif-Drawable Double-Free Vulnerability

A double free vulnerability in the DDGifSlurp function in decoding.c in libpldroidsonroidsgif before 1.2.15, as used in WhatsApp for Android before 2.19.244, allows remote attackers to execute arbitrary code or cause a denial of service. CVE-2019-11932 is a vulnerability in the android-gif-drawab...

Denial of Service Vulnerability in Android-Gif-Drawable

Android-Gif-Drawable is an open source library for Android Gif view and drawing. Android-Gif-Drawable suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Android-gif-drawable CVE-2019-11932 Double Free Remote Code Execution Vulnerability

Description Android-gif-drawable is prone to a remote code execution vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the device. Failed attacks will cause denial-of-service conditions. Technologies Affected Google Android 8.1 Google Android 9.0 Karol...

CVE-2019-11932

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

CVE-2019-11932

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

PT-2019-12568 · Google +1 · Android-Gif-Drawable +1

Name of the Vulnerable Software and Affected Versions: android-gif-drawable versions prior to 1.2.18 WhatsApp for Android versions prior to 2.19.244 Description: A double free vulnerability in the DDGifSlurp function in the android-gif-drawable library allows remote attackers to execute arbitrary...

CVE-2019-11932: Double Free

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

Integer overflow

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

CVE-2019-6007

The CVE-2019-6007 issue affects apng-drawable versions 1.0.0 through 1.6.0. The root cause is an integer overflow in the decoding/processing path for APNG images, which can lead to denial of service or arbitrary code execution via unspecified vectors. Several connected sources (e.g., JVN, NVD, RH...