CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

UBUNTU-CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

gdk-pixbuf security vulnerability

gdk-pixbuf is an image loading library. A security vulnerability exists in gdk-pixbuf version 2.42.10 and earlier. An attacker exploiting this vulnerability could overwrite heap metadata, resulting in a denial of service or code execution attack...

PT-2024-5877 · Unknown +9 · Gdk-Pixbuf +9

Name of the Vulnerable Software and Affected Versions: GdkPixbuf versions through 2.42.10 Description: The issue is related to heap memory corruption in the ANI decoder when parsing chunks in a crafted .ani file. This corruption can occur in the ani load chunk function and may allow an attacker t...

CVE-2022-48622

CVE-2022-48622 affects GNOME GdkPixbuf (gdk-pixbuf2) through 2.42.10. The ANI decoder can heap-corrupt when parsing crafted .ani files (function ani_load_chunk in io-ani.c), with impact to denial of service or potential code execution. Affected advisories note fixes in newer gdk-pixbuf2 releases ...

CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...

Moderate Photon OS Security Update - PHSA-2023-5.0-91-0141

Updates of 'gdk-pixbuf' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2023-5.0-0141

Updates of 'gdk-pixbuf' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0506

Updates of 'traceroute', 'gdk-pixbuf' packages of Photon OS have been released...

Medium: gdk-pixbuf2

Issue Overview: GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. CVE-2021-44648 Affected Packages: gdk-pixbuf2 Issue Correction: Run dnf update gdk-pixbuf2...

Amazon Linux 2023 : gdk-pixbuf2, gdk-pixbuf2-devel, gdk-pixbuf2-modules (ALAS2023-2023-352)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-352 advisory. GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. CVE-2021-44648...

Amazon Linux 2023 : gdk-pixbuf2, gdk-pixbuf2-devel, gdk-pixbuf2-modules (ALAS2023-2023-341)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-341 advisory. GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is...

Medium: gdk-pixbuf2

Issue Overview: GNOME GdkPixbuf aka GDK-PixBuf before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c compositeframe. This overflow is controllable and could be abused for code execution, especially on 32-bit...

Important Photon OS Security Update - PHSA-2023-5.0-0054

Updates of 'gdk-pixbuf', 'perl', 'curl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0054

Updates of 'gdk-pixbuf', 'curl', 'perl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0423

Updates of 'gdk-pixbuf' packages of Photon OS have been released...

Oracle Linux 9 : gdk-pixbuf2 (ELSA-2023-2216)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2216 advisory. - Backport fixes for CVE-2021-46829 and CVE-2021-44648 Tenable has extracted the preceding description block directly from the Oracle Linux security...

gdk-pixbuf2 security update

2.42.6-3 - Backport fixes for CVE-2021-46829 and CVE-2021-44648 - Resolves: rhbz2115213 - Resolves: rhbz2044346...

AlmaLinux 9 : gdk-pixbuf2 (ALSA-2023:2216)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2216 advisory. - GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lz...

RHEL 9 : gdk-pixbuf2 (RHSA-2023:2216)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2216 advisory. The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by...