SUSE SLES12: gdk-pixbuf-devel / gdk-pixbuf-lang / gdk-pixbuf-query-loaders / etc (SUSE-SU-2024:1699-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1699-1 advisory. - CVE-2022-48622: Fixed files rejection with multiple anih chunks bsc1219276. Tenable has extracted the preceding description block directly...

CVE-2022-48622

In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a denial of service or...