CVE-2021-46829

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by…

published July 24, 2022

CVSS
—
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00801 · 56.2th percentile
Published
2022-07-24T18:47Z
EPSS history
Timeline
  • 24 JUL 18:47Z
    GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by…
    cvelistv5