Android-Gif-Drawable Double-Free Vulnerability

A double free vulnerability in the DDGifSlurp function in decoding.c in libpldroidsonroidsgif before 1.2.15, as used in WhatsApp for Android before 2.19.244, allows remote attackers to execute arbitrary code or cause a denial of service. CVE-2019-11932 is a vulnerability in the android-gif-drawab...

Denial of Service Vulnerability in Android-Gif-Drawable

Android-Gif-Drawable is an open source library for Android Gif view and drawing. Android-Gif-Drawable suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Android-gif-drawable CVE-2019-11932 Double Free Remote Code Execution Vulnerability

Description Android-gif-drawable is prone to a remote code execution vulnerability. Attackers may leverage this issue to execute arbitrary code in the context of the device. Failed attacks will cause denial-of-service conditions. Technologies Affected Google Android 8.1 Google Android 9.0 Karol...

CVE-2019-11932

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

CVE-2019-11932

A double free vulnerability in the DDGifSlurp function in decoding.c in the android-gif-drawable library before version 1.2.18, as used in WhatsApp for Android before version 2.19.244 and many other Android applications, allows remote attackers to execute arbitrary code or cause a denial of servi...

PT-2019-12568 · Google +1 · Android-Gif-Drawable +1

Name of the Vulnerable Software and Affected Versions: android-gif-drawable versions prior to 1.2.18 WhatsApp for Android versions prior to 2.19.244 Description: A double free vulnerability in the DDGifSlurp function in the android-gif-drawable library allows remote attackers to execute arbitrary...

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

Integer overflow

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

CVE-2019-6007

The CVE-2019-6007 issue affects apng-drawable versions 1.0.0 through 1.6.0. The root cause is an integer overflow in the decoding/processing path for APNG images, which can lead to denial of service or arbitrary code execution via unspecified vectors. Several connected sources (e.g., JVN, NVD, RH...

CVE-2019-6007

Integer overflow vulnerability in apng-drawable 1.0.0 to 1.6.0 allows an attacker to cause a denial of service DoS condition or execute arbitrary code via unspecified vectors...

apng-drawable vulnerable to integer overflow

Overview apng-drawable provided by LINE Corporation contains an integer overflow vulnerability CWE-190. LINE Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and LINE Corporation coordinated under the Information Security Early Warning...

apng-drawable integer overflow vulnerability

apng-drawable is a lightweight fast animated Portable Network Graphics APNG image decoder for the Android platform. An integer overflow vulnerability in apng-drawable versions 1.0.0 through 1.6.0 can be exploited by an attacker to cause a denial of service and execute arbitrary code...

JVN#39383894: apng-drawable vulnerable to integer overflow

apng-drawable provided by LINE Corporation contains an integer overflow vulnerability CWE-190. Impact An attacker may cause a denial of service DoS condition or execute arbitrary code. Solution Update the Software The developer released apng-drawable that contains a fix for this vulnerability...